Uploaded image for project: 'Service Packs and Hot Fixes'
  1. Service Packs and Hot Fixes
  2. MNT-18271

Improve the Activiti LDAP-AD sync to be able to add users in OUs as Tenant Admins

    Details

    • Type: Service Pack Request
    • Status: Open (View Workflow)
    • Resolution: Unresolved
    • Affects Version/s: Alfresco Activiti 1.4.5
    • Fix Version/s: None
    • Component/s: APS Identify Manager
    • Labels:
      None
    • Bug Priority:
      Category 3
    • ACT Numbers:

      00690211

    • Sprint:
      Docs Sprint 18

      Description

      Summary
      In Activiti, you can set LDAP-AD users as Tenant Admins using the property
      ldap.synchronization.tenantAdminDn

      However, this property did not set a user as Tenant Admin unless the property was set to the DN of a user in CN=Users folder and the ldap.synchronization.userSearchBase was also set to the CN=users Active Directory folder.

      For most customers, not all of their users live in the CN=Users folder. In my example, I created an OU directly under the domain root and set the user search base and tenantAdminDn properties to the OU.

      Example:
      ldap.synchronization.userSearchBase=OU=ActUsers,DC=domain,DC=com
      ldap.synchronization.tenantAdminDn=CN=LdapTenantAdmin,OU=ActUsers,DC=domain,DC=com

      Using the above settings did not bring in an LDAP-AD as the Tenant Admin.

      Instead, you must use properties similar to the below properties:

      ldap.synchronization.userSearchBase=CN=Users,DC=domain,DC=com
      ldap.synchronization.tenantAdminDn=CN=LdapTenantAdmin,CN=Users,DC=stealth,DC=ace

      Notes

      Attached is the properties file with both usersearch base and TenantAdmin DN pointing to cn=users and an OU.

        Attachments

          Issue Links

            Structure

              Activity

                People

                • Assignee:
                  djohnson Doug Johnson
                  Reporter:
                  ccollins Cody Collins
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  0 Start watching this issue

                  Dates

                  • Created:
                    Updated:

                    Structure Helper Panel