nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Removing users from repository during LDAP-synchronization

bernard

Hello,

I've problem with Alfresco 4.2.c.
I'd like to ask one question to specialists.

We have LDAP-synchronization users and groups in Alfresco (FULL and Differential With Removals). Now if I remove user from AD and he have role Editor in different documents Alfresco, Alfresco can't remove it during synchronization.
There is string synchronization.allowDeletions=true in the properties of file default-synchronization.

Our developers of content in Alfresco say that is normally because user-Editor is attached to document in repository. And we should change editor on other real user (in AD) in this document, then Alfresco can remove it.

Is this normal situation for process removing users during AD-sinchronization in Alfresco?
Can I configure Alfresco for removing local users if they have different roles in documents?

Thank you for reply.

Find more posts tagged with

Comments

mlagneaux

Hi,

I think that's a normal situation. Your users are removed by Alfresco but, if a node has one of the removed users login in creator or modifier property, Alfresco is going to create a "ghost" user with this login.

Take a look at one of the removed users in the node browser. I think it will be empty : no email address, no last name, …

bernard

Hello,

Thank you for your reply.
If I look one of the removed user I can see attributes: email, last name..

I 'd like to ask also other question, is parametr true for string synchronization.allowDeletions remove only users that are not have roles in any documents ?

bernard

Is that realy difficult question?

bhavikp

Hi Bernard,

A scheduled job triggers synchronization in differential with removals mode every 24 hours.

What is the value of your following properties.

synchronization.import.cron

bernard

Hi Bhavikp,

synchronization.import.cron=0 0/50 * * * ?
But I think, that's not the reason, I tried to use different parametres of synchronization (full or differential with removals).

bhavikp

ldap.synchronization.personDifferentialQuery

The query to select objects that represent the users to import that have changed since a certain time.