nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

LDAP synchro + NTML authentication -> login error

lascaux

Hi,

I setup the LDAP (Active Directory) synchronization in Alfresco.
I enable the NTML authentication.
Also, as I have no access to the administrator account, I add one of the user from the AD as an administrator in the authority-services-context.xml

Then I started alfresco.

LDAP synchronization runs successfully, the user home space are created in the "company home".

I then try to access to alfresco.

With the account set as an administrator, I have no problem to access alfresco …

With another account, I am not able to access it and I always get the following error :

javax.faces.FacesException: Cannot get value for expression '#{NavigationBean.location}'
caused by:
org.apache.jasper.JasperException: Cannot get value for expression '#{NavigationBean.location}'
caused by:
javax.faces.el.EvaluationException: Cannot get value for expression '#{NavigationBean.location}'
caused by:
javax.faces.el.EvaluationException: org.alfresco.web.bean.NavigationBean
caused by:
javax.faces.el.EvaluationException: Bean: org.alfresco.web.bean.NavigationBean, property: location
caused by:
java.lang.reflect.InvocationTargetException
caused by:
org.alfresco.repo.security.permissions.AccessDeniedException: Access Denied. You do not have the appropriate permissions to perform this operation.
caused by:
net.sf.acegisecurity.AccessDeniedException: Access is denied.

Hide Details

javax.faces.FacesException: Cannot get value for expression '#{NavigationBean.location}' 
at org.apache.myfaces.context.servlet.ServletExternalContextImpl.dispatch(ServletExternalContextImpl.java:421) 
at org.apache.myfaces.application.jsp.JspViewHandlerImpl.renderView(JspViewHandlerImpl.java:234) 
at org.apache.myfaces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:352) 
at javax.faces.webapp.FacesServlet.service(FacesServlet.java:106) 
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252) 
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) 
at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.processType3(NTLMAuthenticationFilter.java:874) 
at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:392) 
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) 
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) 
at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:81) 
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) 
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) 
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213) 
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178) 
at org.jboss.web.tomcat.security.CustomPrincipalValve.invoke(CustomPrincipalValve.java:39) 
at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:159) 
at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:59) 
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) 
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) 
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) 
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) 
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856) 
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:744) 
at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527) 
at org.apache.tomcat.util.net.MasterSlaveWorkerThread.run(MasterSlaveWorkerThread.java:112) 
at java.lang.Thread.run(Thread.java:595) 
Caused by: org.apache.jasper.JasperException: Cannot get value for expression '#{NavigationBean.location}' 
at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:370) 
at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:314) 
at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:264) 
at javax.servlet.http.HttpServlet.service(HttpServlet.java:810) 
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252) 
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) 
at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:672) 
at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:463) 
at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:398) 
at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:301) 
at org.apache.myfaces.context.servlet.ServletExternalContextImpl.dispatch(ServletExternalContextImpl.java:415) 
… 26 more 
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Does anybody faced this problem and resolved it successfully ?

Sylvain

Find more posts tagged with

Comments

lascaux

I found the reason of my problem …

I removed the line <globalPermission permission="FullControl" authority="ROLE_OWNER"/> in the permissionDefinitions.xml as I wanted to disallow to owner of a document to be able to do anything on it !

Is there a way not to give FullControl to ROLE_OWNER without breaking the authentication ?

Sylvain

andy

Hi

How are you creating the home spaces and assigning permissions?
I am guessing the user can not read the home space created.

Try giving the owner read permissions at least.

If this works - give the user or the owner some rights when the home space is created.

If this does not work it is likely to be a bug to do with permissions and preferences.

Regards

Andy

lascaux

Hi Andy,

Sorry for the delay for answering !!!
Even by setting the Owner Permission to READ, I still have the same error.

Are you able to reproduce it ?

Sylvain

Hi

How are you creating the home spaces and assigning permissions?
I am guessing the user can not read the home space created.

Try giving the owner read permissions at least.

If this works - give the user or the owner some rights when the home space is created.

If this does not work it is likely to be a bug to do with permissions and preferences.

Regards

Andy

andy

Hi

Which version are you using? Have you got a home folder provider configured? Have you set permissions in this home folder provider?

Regards

Andy

tiofelix

I've got the same problem. I'm using Alfresco 1.3. I've created about 100 users and some folders and now i got this error with 25 of the users.. i can not find a pattron of error and i have no idea to fix it!! :

javax.faces.el.EvaluationException: Cannot get value for expression '#{NavigationBean.location}'
   at org.apache.myfaces.el.ValueBindingImpl.getValue(ValueBindingImpl.java:397)
   at javax.faces.component.UICommand.getValue(UICommand.java:170)
   at org.alfresco.web.ui.common.component.UIBreadcrumb.getValue(UIBreadcrumb.java:135)
   at org.alfresco.web.ui.common.renderer.BreadcrumbRenderer.encodeBegin(BreadcrumbRenderer.java:70)
   at javax.faces.component.UIComponentBase.encodeBegin(UIComponentBase.java:307)
   at javax.faces.webapp.UIComponentTag.encodeBegin(UIComponentTag.java:337)
   at javax.faces.webapp.UIComponentTag.doStartTag(UIComponentTag.java:224)
   at org.apache.jsp.jsp.browse.browse_jsp._jspx_meth_a_breadcrumb_0(browse_jsp.java:1336)
   at org.apache.jsp.jsp.browse.browse_jsp._jspService(browse_jsp.java:618)
   at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:97)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:810)
   at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:332)
   at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:314)
   at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:264)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:810)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
   at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:672)
   at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:463)
   at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:398)
   at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:301)
   at org.apache.myfaces.context.servlet.ServletExternalContextImpl.dispatch(ServletExternalContextImpl.java:415)
   at org.apache.myfaces.application.jsp.JspViewHandlerImpl.renderView(JspViewHandlerImpl.java:234)
   at org.apache.myfaces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:352)
   at javax.faces.webapp.FacesServlet.service(FacesServlet.java:106)
   at org.alfresco.web.app.servlet.AlfrescoFacesServlet.service(AlfrescoFacesServlet.java:49)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
   at org.alfresco.web.app.servlet.AuthenticationFilter.doFilter(AuthenticationFilter.java:86)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
   at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
   at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:175)
   at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:74)
   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
   at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)
   at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)
   at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
   at org.apache.tomcat.util.net.MasterSlaveWorkerThread.run(MasterSlaveWorkerThread.java:112)
   at java.lang.Thread.run(Thread.java:595)
Caused by: javax.faces.el.EvaluationException: org.alfresco.web.bean.NavigationBean
   at org.apache.myfaces.el.PropertyResolverImpl.getValue(PropertyResolverImpl.java:78)
   at org.apache.myfaces.el.ELParserHelper$MyPropertySuffix.evaluate(ELParserHelper.java:532)
   at org.apache.commons.el.ComplexValue.evaluate(ComplexValue.java:145)
   at org.apache.myfaces.el.ValueBindingImpl.getValue(ValueBindingImpl.java:378)
   … 46 more
Caused by: javax.faces.el.EvaluationException: Bean: org.alfresco.web.bean.NavigationBean, property: location
   at org.apache.myfaces.el.PropertyResolverImpl.getProperty(PropertyResolverImpl.java:404)
   at org.apache.myfaces.el.PropertyResolverImpl.getValue(PropertyResolverImpl.java:71)
   … 49 more
Caused by: java.lang.reflect.InvocationTargetException
   at sun.reflect.GeneratedMethodAccessor1902.invoke(Unknown Source)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
   at java.lang.reflect.Method.invoke(Method.java:585)
   at org.apache.myfaces.el.PropertyResolverImpl.getProperty(PropertyResolverImpl.java:400)
   … 50 more
Caused by: org.alfresco.repo.security.permissions.AccessDeniedException: Acceso denegado. Non ten os permisos apropiados para realizar esta operaciÃƒÂ³n.
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:96)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176)
   at $Proxy50.getProperty(Unknown Source)
   at org.alfresco.web.bean.repository.Repository.getNamePath(Repository.java:305)
   at org.alfresco.web.bean.NavigationBean.getCurrentNode(NavigationBean.java:397)
   at org.alfresco.web.bean.RecentSpacesBean.contextUpdated(RecentSpacesBean.java:150)
   at org.alfresco.web.app.context.UIContextService.notifyBeans(UIContextService.java:96)
   at org.alfresco.web.bean.NavigationBean.setCurrentNodeId(NavigationBean.java:269)
   at org.alfresco.web.bean.NavigationBean.getLocation(NavigationBean.java:430)
   … 54 more
Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.
   at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)
   at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:394)
   at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:40)
   … 65 more‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

lascaux

Hi

Which version are you using? Have you got a home folder provider configured? Have you set permissions in this home folder provider?

Regards

Andy

Hi Andy,

here is the definition of the homefolderprovider in the ldap-authentication-context.xml :

…
<!– Always use the default –>
<entry key="cm:homeFolderProvider">
  <null/>
</entry>
…
‍‍‍‍‍‍‍‍

But I modified the authentication-service-context.xml by setting the bean "security.person.UIDBasedHomeFolderProvider" :

…
<property name="path">
  <value>/${space.company.home.childname}/cm:Utilisateurs</value>
</property>
…
‍‍‍‍‍‍‍

Should I modified something else ? or change something else ?

Thanks

Sylvain

andy

Hi

I suggest you pick one of the users who has problems.

Go to the the user admin screen and see the location of their home folder.
Follow the path and check all the permissions to this folder.

There must be a permission issue by which they can not see their home folder.

Regards

Andy

mcalmendros

Hello,
I have he himself problem that you and I need to solve it urgently.
The users are concerned within the space Usuary and each one of them has its own local folder. In those folders they have complete permissions, but continuous giving that error me when entering.

Some suggestion more? You have solved your problem?

Thank you very much and a greeting.

xiblack

Hi

I suggest you pick one of the users who has problems.

Go to the the user admin screen and see the location of their home folder.
Follow the path and check all the permissions to this folder.

There must be a permission issue by which they can not see their home folder.

Regards

Andy

Hi,

I have the same problem as Sylvai.

I have follow your suggestion above and I can see the role (All) is correctly setup for that user

However, the problem is still there:

javax.faces.FacesException: Cannot get value for expression '#{NavigationBean.location}'
caused by:
org.apache.jasper.JasperException: Cannot get value for expression '#{NavigationBean.location}'
caused by:
javax.faces.el.EvaluationException: Cannot get value for expression '#{NavigationBean.location}'
caused by:
javax.faces.el.EvaluationException: org.alfresco.web.bean.NavigationBean
caused by:
javax.faces.el.EvaluationException: Bean: org.alfresco.web.bean.NavigationBean, property: location
caused by:
java.lang.reflect.InvocationTargetException
caused by:
org.alfresco.repo.security.permissions.AccessDeniedException: Access Denied. You do not have the appropriate permissions to perform this operation.
caused by:
net.sf.acegisecurity.AccessDeniedException: Access is denied.

Hide Details

javax.faces.FacesException: Cannot get value for expression '#{NavigationBean.location}'
at org.apache.myfaces.context.servlet.ServletExternalContextImpl.dispatch(ServletExternalContextImpl.java:421)
at org.apache.myfaces.application.jsp.JspViewHandlerImpl.renderView(JspViewHandlerImpl.java:234)
at org.apache.myfaces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:352)
at javax.faces.webapp.FacesServlet.service(FacesServlet.java:106)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
at org.alfresco.web.app.servlet.AuthenticationFilter.doFilter(AuthenticationFilter.java:81)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)
at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)
at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
at java.lang.Thread.run(Thread.java:595)
Caused by: org.apache.jasper.JasperException: Cannot get value for expression '#{NavigationBean.location}'
at org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServletWrapper.java:512)
at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:395)
at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:314)
at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:264)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:672)
at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:463)
at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:398)
at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:301)
at org.apache.myfaces.context.servlet.ServletExternalContextImpl.dispatch(ServletExternalContextImpl.java:415)
… 20 more

I am still trying to figure out but dont have any clue where I should start,

Any suggestion is appreciated,

lascaux

Hi,

I was not able to make it works like I wanted so I reset the full permission to the owner …

And then make some dev to change the owner of any document to a system user when my workflow was starting …

Sylvain

xiblack

There's one thing worth to notice here: in my AD, user login name (sAMAccountName) does has space and does has case sensitive(e.g: 'Xi Black')

I tried these scenarios:
Scenario A:
1. Setup a fresh Alfresco repository with LDAP authentication but without synchronizing with LDAP
2. Login into Alfresco repository using LDAP account
3. I can login without any issue

Scenario B:
1. Setup a fresh Alfresco repository with LDAP authentication and synchronizing users database with LDAP
2. Login into Alfresco repository using LDAP account
3. Alfresco return System error page

So I suspect the problem is related to MySQL and user.name.caseSensitive setting in reposistory.properties

    126 # Are user names case sensitive?
    127 # ==============================
    128 #
    129 # NOTE: If you are using mysql you must have case sensitive collation
    130 #
    131 # You can do this when creating the alfresco database at the start
    132 # CREATE DATABASE alfresco CHARACTER SET utf8 COLLATION utf8_bin;
    133 # If you want to do this later this is a dump and load fix as it is done when the database, tables and co        lumns are created.
    134 #
    135 # Must other databases are case sensitive by default.
    136 #
    137 user.name.caseSensitive=false
‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I did try to setup database using this statement:

CREATE DATABASE `alfresco` DEFAULT CHARACTER SET utf8 COLLATE utf8_bin;‍‍

But the problem is still there

xiblack

Hi,

I was not able to make it works like I wanted so I reset the full permission to the owner …

And then make some dev to change the owner of any document to a system user when my workflow was starting …

Sylvain

Thanks for the advices.

However, in my installation, I do not disable this setting:

<globalPermission permission="FullControl" authority="ROLE_OWNER"/>‍

Unfortunately, I have the same problem above. Is it something to do with username case sensitive and MySQL?!?

I'm in doubt.

andy

Hi

The penny has dropped ….

If you are using LDAP you should wait until the import has gone through for the first time before logging in. You should disable the autocreation of people. Or people need to login with the case sensitive user name as in AD.

If you auto create people - they are created with the uid the user types in. If the LDAP import matches this it is possible it updates/changes the uid - to match the value in AD - then the permissions do not match.

Thre is a task to fix this.

Check the permission on the home folder is a case sensitive match for the users uid.

Cheers

Andy

xiblack

Oh, I got it.

Thank you very much for the explanations

Cheers,