SOLVED LDAP sync - reset user fields to first time value

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

avtor

Hi all!

We have the following:


    alfresco 4.2.1 EE (without support yet, just for test)
    Ubuntu 12.04.4


By use the example in alfresco docs: «Example: authentication and synchronization with one ldap-ad subsystem» , I have setup ldap sync in the following manner:


alfresco-global.properties:

### authentication ###
authentication.chain=kerberos1:kerberos,ldap1:ldap-ad

### LDAP ###
ldap.authentication.allowGuestLogin=false
ldap.authentication.active=false
ldap.authentication.userNameFormat=%s@avtor.ru
ldap.authentication.java.naming.provider.url=ldap://smb
ldap.authentication.defaultAdministratorUserNames=Administrator,alfresco
ldap.synchronization.java.naming.security.principal=reader@avtor.ru
ldap.synchronization.java.naming.security.credentials=Jlyfljlktnjv44
ldap.synchronization.userSearchBase=CN=Users,DC=avtor,DC=ru
ldap.synchronization.groupSearchBase=CN=Users,DC=avtor,DC=ru

### CRON ###
synchronization.import.cron=1 */5 * * * ? *
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

After that I have some protected fields in a user profile. For example an e-mail field.

So, my problem step by step:

1. Create a user in a LDAP-ad: chapaev , Vasiliy Chapaev , email: chapaev@yandex.ru

2. Login with the user in alfresco, enter to it's profile and see the protected fields with correct e-mail and so on.

For example: field with e-mail has address: chapaev@yandex.ru

3. After that I change his e-mail in LDAP-ad console (for example): change FROM chapaev@yandex.ru TO chapaeff@mail.com

4. After some minutes (just see my cron settings), I see a new value in e-mail field. It looks like this: chapaeff@mail.com - It's OK!

5. I want to setup any other info in a user profile use UNPROTECTED fields: for example setup an user avatar, or setup a mobile phone. - For example, enter a mobile phone.

After save changes I see the following:

I see my mobile phone and OLD value in protected e-mail field! In my case I see: chapaev@yandex.ru again… But LDAP has NEW value chapaeff@mail.com!

The mail field has an old value until I change LDAP-ad entry time stamp for a new full sync of entry.

I think alfresco has a cache with first time value. It's bad.

Can you help me with it?

avtor

You need to logout a user before fullsync from LDAP to alfresco because alfresco share has a cache with user data.