nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Alfresco 5.2 synchronization

amarques

Hi,

i am trying to sync with active directory, but keep geting and error on log.

""[org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [DefaultScheduler_Worker-5] Synchronization aborted due to error
org.alfresco.error.AlfrescoRuntimeException: 04310025 Error during LDAP Search. Reason:company.com:389""

my alfresco-global properties looks like this :

## LdapSync ##

ldap.synchronization.java.naming.security.authentication=simple

ldap.synchronization.active=true

ldap.synchronization.java.naming.security.authentication=simple
ldap.synchronization.java.naming.security.principal=myadmin@mycompany.com

ldap.synchronization.java.naming.security.credentials=pass

ldap.synchronization.personQuery=(objectclass\=user)
ldap.synchronization.personDifferentialQuery=(&(objectclass=user)(!(modifyTimestamp<={0})))
ldap.synchronization.userSearchBase=ou\=Users,dc\=mycompany,dc\=com

ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'

ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
#ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider

ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member

synchronization.synchronizeChangesOnly=false

ldap.synchronization.queryBatchSize=1000
ldap.synchronization.attributeBatchSize=1000
ldap.synchronization.enableProgressEstimation=true
ldap.authentication.escapeCommasInBind=false

synchronization.autoCreatePeopleOnLogin=true
synchronization.synchronizeChangesOnly=true

ldap.synchronization.enableProgressEstimation=true

###########################

any help would be apreciated.

Find more posts tagged with

Alfresco Content Services

Comments

mrks_js1

have your replaced "mycompany" with your values? from your pasted properties i can not see "ldap.authentication.java.naming.provider.url" which probably still contains the sample value

amarques

"mycompany" and "myadmin" are replaced values i just used here, on the file they are correct.

the ldap.authentication.java.naming.provider.url is also there

ldap.authentication.allowGuestLogin=false
ldap.authentication.active=true

ldap.authentication.java.naming.security.authentication=simple

ldap.authentication.java.naming.referral=follow

ldap.authentication.userNameFormat=%s@mycompany.com

ldap.authentication.java.naming.provider.url=ldap://myad:389

thanks

amarques

Also forgot to mention, i can loggin with an AD user and it creates the account on startup.

but the remaining vlaues are not synched from AD, for example, last name, mail... etc etc

mrks_js1

can you reach the host (ping) and is the port open?

where is the alfresco global properties file (path and filename).

amarques

yes, i can reach it, no problem. both with ping to ip and telnet to ip port

mrks_js1

can you post the full trace of the error?

and please try to escape "=" here as well:
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(!(modifyTimestamp<\={0})))

amarques

changed the line to add the \

ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(!(modifyTimestamp<={0})))

i believe it was this you mentioned.

and here is the full trace of the error :

2017-05-31 13:05:28,323 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Starting 'Synchronization' subsystem, ID: [Synchronization, default]
2017-05-31 13:05:28,698 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronizing users and groups with user registry 'ldap1'
2017-05-31 13:05:28,792 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Retrieving all groups from user registry 'ldap1'
2017-05-31 13:05:49,980 ERROR [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization aborted due to error
org.alfresco.error.AlfrescoRuntimeException: 04310016 Error during LDAP Search. Reason:company.com:389
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1326)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getGroups(LDAPUserRegistry.java:711)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.java:996)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronizeInternal(ChainingUserRegistrySynchronizer.java:742)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.access$16(ChainingUserRegistrySynchronizer.java:474)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$7.doWork(ChainingUserRegistrySynchronizer.java:2141)
   at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:555)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java:2135)
   at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onApplicationEvent(ChainingUserRegistrySynchronizer.java:2498)
   at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:96)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ChildApplicationContext.publishEvent(ChildApplicationContextFactory.java:569)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:954)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicationContextFactory.java:824)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:1098)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.onApplicationEvent(AbstractPropertyBackedBean.java:637)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEventInternal(SafeApplicationEventMulticaster.java:214)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:185)
   at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:334)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:954)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
   at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:410)
   at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:306)
   at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:112)
   at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:70)
   at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:5016)
   at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5524)
   at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
   at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
   at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
   at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
   at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:672)
   at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1859)
   at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
   at java.util.concurrent.FutureTask.run(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
   at java.lang.Thread.run(Unknown Source)
Caused by: javax.naming.CommunicationException: company.com:389 [Root exception is java.net.ConnectException: Connection timed out: connect]
   at com.sun.jndi.ldap.LdapReferralContext.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapReferralException.getReferralContext(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
   at javax.naming.directory.InitialDirContext.search(Unknown Source)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1305)
   ... 38 more
Caused by: java.net.ConnectException: Connection timed out: connect
   at java.net.DualStackPlainSocketImpl.connect0(Native Method)
   at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)
   at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
   at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
   at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
   at java.net.PlainSocketImpl.connect(Unknown Source)
   at java.net.SocksSocketImpl.connect(Unknown Source)
   at java.net.Socket.connect(Unknown Source)
   at java.net.Socket.connect(Unknown Source)
   at java.net.Socket.<init>(Unknown Source)
   at java.net.Socket.<init>(Unknown Source)
   at com.sun.jndi.ldap.Connection.createSocket(Unknown Source)
   at com.sun.jndi.ldap.Connection.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapClient.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapClientFactory.createPooledConnection(Unknown Source)
   at com.sun.jndi.ldap.pool.Connections.<init>(Unknown Source)
   at com.sun.jndi.ldap.pool.Pool.getPooledConnection(Unknown Source)
   at com.sun.jndi.ldap.LdapPoolManager.getLdapClient(Unknown Source)
   at com.sun.jndi.ldap.LdapClient.getInstance(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)
   at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)
   at com.sun.jndi.url.ldap.ldapURLContextFactory.getObjectInstance(Unknown Source)
   at javax.naming.spi.NamingManager.getURLObject(Unknown Source)
   at javax.naming.spi.NamingManager.processURL(Unknown Source)
   at javax.naming.spi.NamingManager.processURLAddrs(Unknown Source)
   at javax.naming.spi.NamingManager.getObjectInstance(Unknown Source)
   ... 47 more
2017-05-31 13:05:50,089 ERROR [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization aborted due to error
org.alfresco.error.AlfrescoRuntimeException: 04310016 Error during LDAP Search. Reason:company.com:389
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1326)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getGroups(LDAPUserRegistry.java:711)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.java:996)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronizeInternal(ChainingUserRegistrySynchronizer.java:742)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.access$16(ChainingUserRegistrySynchronizer.java:474)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$7.doWork(ChainingUserRegistrySynchronizer.java:2141)
   at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:555)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java:2135)
   at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onApplicationEvent(ChainingUserRegistrySynchronizer.java:2498)
   at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:96)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ChildApplicationContext.publishEvent(ChildApplicationContextFactory.java:569)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:954)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicationContextFactory.java:824)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:1098)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.onApplicationEvent(AbstractPropertyBackedBean.java:637)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEventInternal(SafeApplicationEventMulticaster.java:214)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:185)
   at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:334)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:954)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
   at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:410)
   at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:306)
   at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:112)
   at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:70)
   at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:5016)
   at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5524)
   at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
   at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
   at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
   at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
   at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:672)
   at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1859)
   at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
   at java.util.concurrent.FutureTask.run(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
   at java.lang.Thread.run(Unknown Source)
Caused by: javax.naming.CommunicationException: company.com:389 [Root exception is java.net.ConnectException: Connection timed out: connect]
   at com.sun.jndi.ldap.LdapReferralContext.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapReferralException.getReferralContext(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
   at javax.naming.directory.InitialDirContext.search(Unknown Source)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1305)
   ... 38 more
Caused by: java.net.ConnectException: Connection timed out: connect
   at java.net.DualStackPlainSocketImpl.connect0(Native Method)
   at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)
   at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
   at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
   at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
   at java.net.PlainSocketImpl.connect(Unknown Source)
   at java.net.SocksSocketImpl.connect(Unknown Source)
   at java.net.Socket.connect(Unknown Source)
   at java.net.Socket.connect(Unknown Source)
   at java.net.Socket.<init>(Unknown Source)
   at java.net.Socket.<init>(Unknown Source)
   at com.sun.jndi.ldap.Connection.createSocket(Unknown Source)
   at com.sun.jndi.ldap.Connection.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapClient.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapClientFactory.createPooledConnection(Unknown Source)
   at com.sun.jndi.ldap.pool.Connections.<init>(Unknown Source)
   at com.sun.jndi.ldap.pool.Pool.getPooledConnection(Unknown Source)
   at com.sun.jndi.ldap.LdapPoolManager.getLdapClient(Unknown Source)
   at com.sun.jndi.ldap.LdapClient.getInstance(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)
   at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)
   at com.sun.jndi.url.ldap.ldapURLContextFactory.getObjectInstance(Unknown Source)
   at javax.naming.spi.NamingManager.getURLObject(Unknown Source)
   at javax.naming.spi.NamingManager.processURL(Unknown Source)
   at javax.naming.spi.NamingManager.processURLAddrs(Unknown Source)
   at javax.naming.spi.NamingManager.getObjectInstance(Unknown Source)
   ... 47 more
2017-05-31 13:05:50,105 WARN [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Failed initial synchronize with user registries
org.alfresco.error.AlfrescoRuntimeException: 04310016 Error during LDAP Search. Reason:company.com:389
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1326)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getGroups(LDAPUserRegistry.java:711)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.java:996)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronizeInternal(ChainingUserRegistrySynchronizer.java:742)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.access$16(ChainingUserRegistrySynchronizer.java:474)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$7.doWork(ChainingUserRegistrySynchronizer.java:2141)
   at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:555)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java:2135)
   at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56)
   at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onApplicationEvent(ChainingUserRegistrySynchronizer.java:2498)
   at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:96)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ChildApplicationContext.publishEvent(ChildApplicationContextFactory.java:569)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:954)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
   at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicationContextFactory.java:824)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:1098)
   at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.onApplicationEvent(AbstractPropertyBackedBean.java:637)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEventInternal(SafeApplicationEventMulticaster.java:214)
   at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:185)
   at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:334)
   at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:954)
   at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)
   at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:410)
   at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:306)
   at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:112)
   at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:70)
   at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:5016)
   at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5524)
   at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
   at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
   at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
   at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
   at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:672)
   at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1859)
   at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
   at java.util.concurrent.FutureTask.run(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
   at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
   at java.lang.Thread.run(Unknown Source)
Caused by: javax.naming.CommunicationException: company.com:389 [Root exception is java.net.ConnectException: Connection timed out: connect]
   at com.sun.jndi.ldap.LdapReferralContext.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapReferralException.getReferralContext(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
   at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
   at javax.naming.directory.InitialDirContext.search(Unknown Source)
   at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1305)
   ... 38 more
Caused by: java.net.ConnectException: Connection timed out: connect
   at java.net.DualStackPlainSocketImpl.connect0(Native Method)
   at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)
   at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
   at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
   at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
   at java.net.PlainSocketImpl.connect(Unknown Source)
   at java.net.SocksSocketImpl.connect(Unknown Source)
   at java.net.Socket.connect(Unknown Source)
   at java.net.Socket.connect(Unknown Source)
   at java.net.Socket.<init>(Unknown Source)
   at java.net.Socket.<init>(Unknown Source)
   at com.sun.jndi.ldap.Connection.createSocket(Unknown Source)
   at com.sun.jndi.ldap.Connection.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapClient.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapClientFactory.createPooledConnection(Unknown Source)
   at com.sun.jndi.ldap.pool.Connections.<init>(Unknown Source)
   at com.sun.jndi.ldap.pool.Pool.getPooledConnection(Unknown Source)
   at com.sun.jndi.ldap.LdapPoolManager.getLdapClient(Unknown Source)
   at com.sun.jndi.ldap.LdapClient.getInstance(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source)
   at com.sun.jndi.ldap.LdapCtx.<init>(Unknown Source)
   at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)
   at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)
   at com.sun.jndi.url.ldap.ldapURLContextFactory.getObjectInstance(Unknown Source)
   at javax.naming.spi.NamingManager.getURLObject(Unknown Source)
   at javax.naming.spi.NamingManager.processURL(Unknown Source)
   at javax.naming.spi.NamingManager.processURLAddrs(Unknown Source)
   at javax.naming.spi.NamingManager.getObjectInstance(Unknown Source)
   ... 47 more
2017-05-31 13:05:50,105 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'Synchronization' subsystem, ID: [Synchronization, default] complete

mrks_js1

so either you have not replaced "company.com:389" in your properties file or your ldap simply is not reachable from the machine where alfresco is installed. in which file did you set these properties?

amarques

alfresco-global.properties . The server answers to ping and telnet on that port.

let's assume me my admin is rabbit and password is carrot. my domain is free.priv

ldap.synchronization.java.naming.security.principal=rabbit@free.priv

ldap.synchronization.java.naming.security.credentials=carrot

If i logon with a user from AD it creates the user account , it simply doesn't get the remaining info i want and gives that error.

mehe

Hi Antonio,

I use the ldap client "apache directory studio" to test my ldap connection and queries.

My ldap configuration differs in

ldap.authentication.java.naming.provider.url=ldap://myad:389

I had to use the fully qualified name in the URL ldap://myad.mydom:389

Created an extra AD user for ldap sync "ldap.alfresco" which is referred to as

ldap.sychronization.java.naming.security.principal=ldap.alfresco@mydom

The user has be in the according groups if your AD is ACLed in some way. Normally it just has to be a Domain user.

Here are the only values I set (changed to example domain dom.local, domaincontroller server is dc).

I use searchbase dc=dom,dc=local because some users are in a special ou and wanted to import only users with email address - you should adapt this

DC is windows 2012, alfresco (5.2.0 r135134-b14) uses ubuntu 16.04.2 LTS

ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@dom.local
ldap.authentication.java.naming.provider.url=ldap://dc.dom.local:389
ldap.authentication.defaultAdministratorUserNames=Administrator
ldap.synchronization.java.naming.security.principal=ldap.alfresco@dom.local
ldap.synchronization.java.naming.security.credentials=XXXXXXXX

ldap.synchronization.groupSearchBase=dc=dom,dc=local
ldap.synchronization.userSearchBase=dc=dom,dc=local

#group Type = global groups
ldap.synchronization.groupQuery=(&((objectClass=group)(groupType:1.2.840.113556.1.4.803:=2)))
ldap.synchronization.groupDifferentialQuery=(&((objectClass=group)(groupType:1.2.840.113556.1.4.803:=2)))
#only enabled users with mail address
ldap.synchronisation.personQuery=(&((objectClass=person)(userAccountControl:1.2.840.113556.1.4.803:=512)(mail=*@*)))
ldap.synchronisation.personDifferentialQuery=(&((objectClass=person)(userAccountControl:1.2.840.113556.1.4.803:=512)(mail=*@*)))

### Sync Settings ###
synchronization.synchronizeChangesOnly=false
synchronization.syncOnStartup=true
synchronization.allowDeletions=true
synchronization.syncWhenMissingPeopleLogIn=true
synchronization.import.cron=0 0 * * * ?‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

This is the setup of my test system. So differential queries are the same as the full queries...

amarques

Got it working with pass- trough. Thanks all for the help