AnsweredAssumed Answered

AD Sync doesn't work

Question asked by firetux on Jun 12, 2014
Latest reply on Jun 20, 2014 by lolu
Hey guys,
I got alfresco 4.2.f community on debian wheezy working so far.
My AD Auhtentication works but there is no userprofile data synced

When a new AD User login into alfresco he will get access but the userprofile
stays empty:

here is my alfresco-global.properties: (secret data are hidden)


###############################
## Common Alfresco Properties #
###############################

dir.root=/opt/alfresco/alf_data

alfresco.context=alfresco
alfresco.host=x.x.x.x
alfresco.port=8080
alfresco.protocol=http

share.context=share
share.host=x.x.x.x
share.port=8080
share.protocol=http

### database connection properties ###
db.driver=org.postgresql.Driver
db.username=alfresco
db.password=xxxxxxxxxxxx
db.name=alfresco
db.url=jdbc:postgresql://localhost:5432/${db.name}

### FTP Server Configuration ###
ftp.enabled=true
ftp.port=21

### RMI service ports ###
alfresco.rmi.services.port=50500
avm.rmi.service.port=0
avmsync.rmi.service.port=0
attribute.rmi.service.port=0
authentication.rmi.service.port=0
repo.rmi.service.port=0
action.rmi.service.port=0
deployment.rmi.service.port=0

### External executable locations ###
ooo.exe=/opt/alfresco/libreoffice/program/soffice.bin
ooo.enabled=true
ooo.port=8100
img.root=/opt/alfresco/common
img.dyn=${img.root}/lib
img.exe=${img.root}/bin/convert
swf.exe=/opt/alfresco/common/bin/pdf2swf
swf.languagedir=/opt/alfresco/common/japanese

jodconverter.enabled=false
jodconverter.officeHome=/opt/alfresco/libreoffice
jodconverter.portNumbers=8100

### Initial admin password ###
alfresco_user_store.adminpassword=xxxxxxxxxxxxxxxxxxxx

### E-mail site invitation setting ###
notification.email.siteinvite=true
mail.host=mxrelay.xxxxxx
mail.port=25
mail.from.default=alfresco@xxx.de
mail.protocol=smtp
mail.smtp.auth=false

### License location ###
dir.license.external=/opt/alfresco

### Solr indexing ###
index.subsystem.name=solr
dir.keystore=${dir.root}/keystore
solr.port.ssl=8443

### BPM Engine ###
system.workflow.engine.jbpm.enabled=false



### LDAP Configuration ###
authentication.chain=passthru1:passthru,ldap1:ldap
#authentication.chain=ldap-ad1:ldap-ad,alfrescoNtlm1:alfrescoNtlm

passthru.authentication.sso.enabled=false
passthru.authentication.allowGuestLogin=false
passthru.authentication.authenticateCIFS=false
passthru.authentication.authenticateFTP=false

passthru.authentication.servers=xxx.de
passthru.authentication.domain=xxx.de
passthru.authentication.useLocalServer=false
passthru.authentication.defaultAdministratorUserNames=axxx315,axxx444,axxx470
passthru.authentication.connectTimeout=5000
passthru.authentication.offlineCheckInterval=300
passthru.authentication.protocolOrder=TCPIP,NETBIOS

ldap.authentication.active=false
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.userNameFormat=%s@xxx.de
ldap.authentication.allowGuestLogin=false
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://xxx.de:389
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false

ldap.synchronization.active=true
ldap.synchronization.java.naming.security.principal=yyyy\\qdbem03
ldap.synchronization.java.naming.security.credentials=UED$~Mf4[5MftD=dFwBU
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.groupDifferentialQuery=(&(objectclass=group)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(&(objectclass=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personDifferentialQuery=(&(objectclass=user)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupQuery=(objectclass\=group)

ldap.synchronization.groupSearchBase=DC\=xxx,DC\=de
ldap.synchronization.userSearchBase=DC\=xxx,DC\=de

ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss’.0Z’
ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=department
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupType=group
ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member

#synchronization.synchronizeChangesOnly=true
#synchronization.import.cron=55 10 * * *
cifs.enabled=false



Thank you for help!!!!!!!

Outcomes