AnsweredAssumed Answered

Synchronisation LDAP

Question asked by ko08nz on Apr 21, 2009
Latest reply on Apr 30, 2009 by ko08nz
Bonjour,

J'ai un soucis de synchronisation de avec les infos liés à Active Directory.
La synchronisation avec AD marche mais impossible de récupérer les infos liés aux utilisateurs, ni à synchroniser les groupes existents.
Le serveur est sous Debian Etch.

AD sous 2003 :
toto.org
    - ou titi
*groupe_titi
    - ou tata
*groupe_tata

Voici mes fichiers de confs :
ldap-synchronisation.properties

#
# This properties file is used to configure LDAP syncronisation
#

# The query to find the people to import
# ldap.synchronisation.personQuery=(objectclass=inetOrgPerson)
ldap.synchronisation.personQuery=(objectclass=user)

# The search base of the query to find people to import
# ldap.synchronisation.personSearchBase=dc=company,dc=com
ldap.synchronisation.personSearchBase=dc=toto,dc=org

# The attribute name on people objects found in LDAP to use as the uid in Alfresco
# ldap.synchronisation.userIdAttributeName=uid
ldap.synchronisation.userIdAttributeName=sAMAccountName

# The attribute on person objects in LDAP to map to the first name property in Alfresco
ldap.synchronisation.userFirstNameAttributeName=givenName

# The attribute on person objects in LDAP to map to the last name property in Alfresco
ldap.synchronisation.userLastNameAttributeName=sn

# The attribute on person objects in LDAP to map to the email property in Alfresco
ldap.synchronisation.userEmailAttributeName=mail

# The attribute on person objects in LDAP to map to the organizational id  property in Alfresco
ldap.synchronisation.userOrganizationalIdAttributeName=toto

# The default home folder provider to use for people created via LDAP import
# ldap.synchronisation.defaultHomeFolderProvider=personalHomeFolderProvider
ldap.synchronisation.defaultHomeFolderProvider=userHomesHomeFolderProvider

# The query to find group objects
# ldap.synchronisation.groupQuery=(objectclass=groupOfNames)
ldap.synchronisation.groupQuery=(objectclass=group)

# The search base to use to find group objects
# ldap.synchronisation.groupSearchBase=dc=company,dc=com
ldap.synchronisation.groupSearchBase=dc=toto,dc=org

# The attribute on LDAP group objects to map to the gid property in Alfrecso
ldap.synchronisation.groupIdAttributeName=cn

# The group type in LDAP
ldap.synchronisation.groupType=groupOfNames

# The person type in LDAP
# ldap.synchronisation.personType=inetOrgPerson
# ldap.synchronisation.personType=user
ldap.synchronisation.personType=sAMAccountName

# The attribute in LDAP on group objects that defines the DN for its members
# ldap.synchronisation.groupMemberAttributeName=member
ldap.synchronisation.groupMemberAttributeName=memberof

# The cron expression defining when people imports should take place
ldap.synchronisation.import.person.cron=0 0 * * * ?

# The cron expression defining when group imports should take place
ldap.synchronisation.import.group.cron=0 30 * * * ?

# Should all groups be cleared out at import time?
# - this is safe as groups are not used in Alfresco for other things (unlike person objects which you should never clear out during an import)
# - setting this to true means old group definitions will be tidied up.
ldap.synchronisation.import.group.clearAllChildren=false

…et copier ldap-synchronisation-context.xml.sample en ldap-synchronisation-context.xml
sans modif particulière.


CompilerOracle: exclude org/apache/lucene/index/IndexReader$1.doBody
CompilerOracle: exclude org/alfresco/repo/search/impl/lucene/index/IndexInfo$Merger.mergeIndexes
CompilerOracle: exclude org/alfresco/repo/search/impl/lucene/index/IndexInfo$Merger.mergeDeletions
21 avr. 2009 17:48:37 org.apache.coyote.http11.Http11Protocol init
INFO: Initialisation de Coyote HTTP/1.1 sur http-8080
21 avr. 2009 17:48:37 org.apache.coyote.http11.Http11Protocol init
INFO: Initialisation de Coyote HTTP/1.1 sur http-8443
21 avr. 2009 17:48:37 org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 1970 ms
21 avr. 2009 17:48:37 org.apache.catalina.core.StandardService start
INFO: D�marrage du service Catalina
21 avr. 2009 17:48:37 org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.18
21 avr. 2009 17:48:37 org.apache.catalina.startup.HostConfig deployWAR
INFO: D�ploiement de l'archive alfresco.war de l'application web
21 avr. 2009 17:48:40 org.apache.catalina.core.StandardContext addApplicationListener
INFO: The listener "org.apache.myfaces.webapp.StartupServletContextListener" is already configured for this context. The duplicate definition has been ignored.
17:48:57,128  WARN  [authentication.ldap.LDAPInitialDirContextFactoryImpl] LDAP server supports anonymous bind ldap://hihi.totot.org:389
17:48:57,336  INFO  [authentication.ldap.LDAPInitialDirContextFactoryImpl] LDAP server does not fall back to anonymous bind for a string uid and password at ldap://hihi.totot.org/:389
17:48:57,424  INFO  [authentication.ldap.LDAPInitialDirContextFactoryImpl] LDAP server does not fall back to anonymous bind for a simple dn and password at ldap://hihi.totot.org:389
17:48:57,431  INFO  [authentication.ldap.LDAPInitialDirContextFactoryImpl] LDAP server does not fall back to anonymous bind for known principal and invalid credentials at ldap://hihi.totot.org:389
17:48:58,867  ERROR [transform.magick.AbstractImageMagickContentTransformer] ImageMagickContentTransformer not available: Failed to perform ImageMagick transformation:
Execution result:
   os:         Linux
   command:    [/usr/local/bin/convert, /opt/Alfresco/tomcat/temp/Alfresco/ImageMagickContentTransformer_init_source_952390124082078657.gif, /opt/Alfresco/tomcat/temp/Alfresco/ImageMagickContentTransformer_init_target_4878127066569961939.png]
   succeeded:  false
   exit code:  1
   out:       
   err:        Cannot run program "/usr/local/bin/convert": java.io.IOException: error=2, No such file or directory
17:48:59,502  WARN  [jmx.support.JmxUtils] Found more than one MBeanServer instance. Returning first from list.
17:49:00,785  INFO  [config.xml.XMLConfigService$PropertyConfigurer] Loading properties file from class path resource [alfresco/file-servers.properties]
17:49:03,108  DEBUG [repo.importer.ImporterJob] preRegister called. Server=com.sun.jmx.mbeanserver.JmxMBeanServer@d6866f, name=log4j:logger=org.alfresco.repo.importer.ImporterJob
17:49:03,117  DEBUG [security.authentication.ldap] preRegister called. Server=com.sun.jmx.mbeanserver.JmxMBeanServer@d6866f, name=log4j:logger=org.alfresco.repo.security.authentication.ldap
17:49:03,121  DEBUG [repo.importer.ExportSourceImporter] preRegister called. Server=com.sun.jmx.mbeanserver.JmxMBeanServer@d6866f, name=log4j:logger=org.alfresco.repo.importer.ExportSourceImporter
17:49:07,641  ERROR [content.transform.RuntimeExecutableContentTransformer] Failed to start a runtime executable content transformer:
Execution result:
   os:         Linux
   command:    [/opt/Alfresco/bin/pdf2swf, -V]
   succeeded:  false
   exit code:  1
   out:       
   err:        Cannot run program "/opt/Alfresco/bin/pdf2swf": java.io.IOException: error=2, No such file or directory
17:49:17,071  INFO  [domain.schema.SchemaBootstrap] Schema managed by database dialect org.hibernate.dialect.DerbyDialect.
17:49:17,081  INFO  [domain.schema.SchemaBootstrap] Alfresco is using the Apache Derby default database. Please only use this while evaluating Alfresco, it is NOT recommended for production or deployment!
17:49:20,191  INFO  [domain.schema.SchemaBootstrap] No changes were made to the schema.
17:49:25,187 User:System INFO  [repo.admin.ConfigurationChecker] The Alfresco root data directory ('dir.root') is: /opt/Alfresco/alf_data
17:49:25,321 User:System INFO  [admin.patch.PatchExecuter] Checking for patches to apply …
17:49:25,611 User:System INFO  [admin.patch.PatchExecuter] No patches were required.
17:49:25,616 User:System INFO  [repo.module.ModuleServiceImpl] Found 1 module(s).
17:49:25,774 User:System INFO  [repo.module.ModuleServiceImpl] Starting module 'com.optaros.alfresco.docasu' version 1.5.0.
17:49:31,660 User:System ERROR [alfresco.smb.protocol] Failed to get local domain/workgroup name, using default of WORKGROUP
17:49:31,660 User:System ERROR [alfresco.smb.protocol] (This may be due to firewall settings or incorrect <broadcast> setting)
17:49:31,672 User:System ERROR [smb.protocol.auth] No valid CIFS authentication combination available
17:49:31,673 User:System ERROR [smb.protocol.auth] Either enable Kerberos support or use an authentication component that supports MD4 hashed passwords
17:49:31,673 User:System ERROR [alfresco.smb.protocol] CIFS server configuration error, Invalid CIFS authenticator configuration
org.alfresco.error.AlfrescoRuntimeException: Invalid CIFS authenticator configuration
        at org.alfresco.filesys.auth.cifs.EnterpriseCifsAuthenticator.initialize(EnterpriseCifsAuthenticator.java:389)
        at org.alfresco.jlan.smb.server.CIFSConfigSection.setAuthenticator(CIFSConfigSection.java:607)
        at org.alfresco.filesys.ServerConfigurationBean.processCIFSServerConfig(ServerConfigurationBean.java:881)
        at org.alfresco.filesys.ServerConfigurationBean.init(ServerConfigurationBean.java:546)
        at org.alfresco.filesys.ServerConfigurationBean.onApplicationEvent(ServerConfigurationBean.java:3098)
        at org.springframework.context.event.SimpleApplicationEventMulticaster$1.run(SimpleApplicationEventMulticaster.java:77)
        at org.springframework.core.task.SyncTaskExecutor.execute(SyncTaskExecutor.java:49)
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:75)
        at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:246)
        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:355)
        at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:244)
        at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:187)
        at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:49)
        at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3843)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4342)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:525)
        at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:830)
        at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:719)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:490)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1149)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:311)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:117)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:719)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
        at org.apache.catalina.core.StandardService.start(StandardService.java:516)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:578)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
17:49:31,675 User:System ERROR [alfresco.smb.protocol] FTP server configuration error, Wrong authentication setup for alfresco authenticator
org.alfresco.error.AlfrescoRuntimeException: Wrong authentication setup for alfresco authenticator
        at org.alfresco.filesys.ServerConfigurationBean.processFTPServerConfig(ServerConfigurationBean.java:1833)
        at org.alfresco.filesys.ServerConfigurationBean.init(ServerConfigurationBean.java:580)
        at org.alfresco.filesys.ServerConfigurationBean.onApplicationEvent(ServerConfigurationBean.java:3098)
        at org.springframework.context.event.SimpleApplicationEventMulticaster$1.run(SimpleApplicationEventMulticaster.java:77)
        at org.springframework.core.task.SyncTaskExecutor.execute(SyncTaskExecutor.java:49)
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:75)
        at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:246)
        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:355)
        at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:244)
        at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:187)
        at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:49)
        at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3843)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4342)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:525)
        at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:830)
        at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:719)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:490)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1149)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:311)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:117)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:719)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
        at org.apache.catalina.core.StandardService.start(StandardService.java:516)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:578)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
17:49:32,095 User:System INFO  [service.descriptor.DescriptorService] Alfresco JVM - v1.6.0_12-b04; maximum heap size 506,313MB
17:49:32,095 User:System INFO  [service.descriptor.DescriptorService] Alfresco started (Labs): Current version 3.0.0 (Stable 1526) schema 1002 - Installed version 3.0.0 (Stable 1526) schema 1002
21 avr. 2009 17:49:46 org.apache.catalina.startup.HostConfig deployWAR
INFO: D�ploiement de l'archive share.war de l'application web
17:49:50,382  INFO  [web.site.FrameworkHelper] Successfully Initialized Web Framework
21 avr. 2009 17:49:50 org.apache.catalina.startup.HostConfig deployWAR
INFO: D�ploiement de l'archive studio.war de l'application web
17:49:53,594  INFO  [web.scripts.DeclarativeRegistry] Registered 67 Web Scripts (+0 failed), 71 URLs
17:49:53,686  INFO  [web.scripts.AbstractRuntimeContainer] Initialised Presentation Web Script Container (in 357.826ms)
17:50:54,250  INFO  [web.scripts.DeclarativeRegistry] Registered 101 Web Scripts (+0 failed), 105 URLs
17:50:54,250  INFO  [web.scripts.AbstractRuntimeContainer] Initialised WebFramework Web Script Container (in 60554.062ms)
17:50:54,282  INFO  [web.site.FrameworkHelper] Successfully Initialized Web Framework
21 avr. 2009 17:50:54 org.apache.coyote.http11.Http11Protocol start
INFO: D�marrage de Coyote HTTP/1.1 sur http-8080
21 avr. 2009 17:50:54 org.apache.coyote.http11.Http11Protocol start
INFO: D�marrage de Coyote HTTP/1.1 sur http-8443
21 avr. 2009 17:50:54 org.apache.catalina.startup.Catalina start
INFO: Server startup in 137137 ms
21 avr. 2009 17:53:09 org.apache.coyote.http11.Http11Protocol pause
INFO: Suspension de Coyote HTTP/1.1 sur http-8080
21 avr. 2009 17:53:09 org.apache.coyote.http11.Http11Protocol pause
INFO: Suspension de Coyote HTTP/1.1 sur http-8443
21 avr. 2009 17:53:10 org.apache.catalina.core.StandardService stop
INFO: Arr�t du service Catalina
17:53:20,332  ERROR [post.lookup.PostLookup] Exception during select of posts
java.sql.SQLException: org.apache.derby.jdbc.EmbeddedDriver is not registered with the JDBC driver manager
        at org.apache.derby.jdbc.AutoloadedDriver.getDriverModule(Unknown Source)
        at org.apache.derby.jdbc.AutoloadedDriver.connect(Unknown Source)
        at org.apache.commons.dbcp.DriverConnectionFactory.createConnection(DriverConnectionFactory.java:37)
        at org.apache.commons.dbcp.PoolableConnectionFactory.makeObject(PoolableConnectionFactory.java:290)
        at org.apache.commons.pool.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:974)
        at org.apache.commons.dbcp.PoolingDataSource.getConnection(PoolingDataSource.java:95)
        at org.apache.commons.dbcp.BasicDataSource.getConnection(BasicDataSource.java:540)
        at org.springframework.jdbc.datasource.DataSourceUtils.doGetConnection(DataSourceUtils.java:113)
        at org.springframework.jdbc.datasource.TransactionAwareDataSourceProxy.getConnection(TransactionAwareDataSourceProxy.java:109)
        at com.ibatis.sqlmap.engine.transaction.external.ExternalTransaction.init(ExternalTransaction.java:53)
        at com.ibatis.sqlmap.engine.transaction.external.ExternalTransaction.getConnection(ExternalTransaction.java:90)
        at com.ibatis.sqlmap.engine.mapping.statement.GeneralStatement.executeQueryForList(GeneralStatement.java:123)
        at com.ibatis.sqlmap.engine.impl.SqlMapExecutorDelegate.queryForList(SqlMapExecutorDelegate.java:615)
        at com.ibatis.sqlmap.engine.impl.SqlMapExecutorDelegate.queryForList(SqlMapExecutorDelegate.java:589)
        at com.ibatis.sqlmap.engine.impl.SqlMapSessionImpl.queryForList(SqlMapSessionImpl.java:118)
        at com.ibatis.sqlmap.engine.impl.SqlMapClientImpl.queryForList(SqlMapClientImpl.java:95)
        at org.alfresco.repo.activities.ibatis.IBatisActivityPostDaoServiceImpl.selectPosts(IBatisActivityPostDaoServiceImpl.java:49)
        at org.alfresco.repo.activities.post.lookup.PostLookup.execute(PostLookup.java:114)
        at org.alfresco.repo.activities.post.lookup.PostLookupJob.execute(PostLookupJob.java:56)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)
17:53:21,528  ERROR [repo.shutdown.ShutdownBackstop] Alfresco terminating via Shutdown Backstop
17:53:21,541  ERROR [repo.shutdown.ShutdownBackstop] Alfresco terminated

J'ai dû louper quelque chose car mêmes avec les logs, j'ai du mal…
J'ai pas mal cherché sur les forums mais je crois que je me suis un peu égaré.

Merci d'avance pour vos retours.

Outcomes