LDAP Sync - Two OU- Ignoring non-existent member Issue

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

maruthuv

Hi

I am very new to Alfresco. Please help me to find solution. I have configured two LDAP AD sync and my authentication chain looks like below

authentication.chain=ldap1:ldap-ad,ldap2:ldap-mailer,alfrescoNtlm1:alfrescoNtlm‍

The requirement is that i need to sync two different OU's. So i configured two ldap configuration

ldap1 configuration sync users + groups and my configuration looks like below

ldap.synchronization.groupSearchBase=OU\=Grouper,OU\=Groups,DC=domain,DC=com
ldap.synchronization.groupQuery=(objectclass\=group)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(whenChanged<\={0})))

ldap.synchronization.userSearchBase=OU\=Employees,OU\=Users,DC=domain,DC=com
ldap.synchronization.personQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(whenChanged<\={0})))‍‍‍‍‍‍‍

ldap2 configuration want that to sync only Mailer groups and no users since i already the users are synced in ldap1

ldap.synchronization.groupSearchBase=OU\=Mailer,OU\=Groups,DC=domain,DC=com
ldap.synchronization.groupQuery=(objectclass\=group)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(whenChanged<\={0})))

ldap.synchronization.userSearchBase=OU\=Employees,OU\=Users,DC=domain,DC=com
ldap.synchronization.personQuery=(&(objectclass\=<strong>skiballusers</strong>)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=<strong>skiballusers</strong>)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(whenChanged<\={0})))‍‍‍‍‍‍‍

The ldap1 sync works find and when i try to syn the ldap2, the sync doesn't add missing users to the groups. I am getting following warning and there is no sync happen. But the removal of the user is working fine.

<strong>Ignoring non-existent member 'user1' in groups {'groupname1', 'groupname2'}</strong>

Please help me to find out where is the mistake.

Thanks
Mars

bopolissimus

Hi all,

I'm seeing exactly this same thing with OpenLDAP and Alfresco CE 5.0.d.  Is this a known issue?

Gerald Quimpo