mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-08-07 17:49:17 +00:00
86f9dfea17
28993: HomeFolderProviderSynchronizer: Provider used for LDAP to continue to use username as home folder name directly under .../app:company_home/app:user_homes
Property spaces.user_homes.regex.pattern now set to "" rather than "^(..)" which would have given a single level hash structure.
28970: Merge DEV/ALAN/HOME_FOLDER to DEV/V3.4-BUG-FIX
28947: - Introduction of version 2 HomeFolderProvider2 and re-factor of version 1
so that the code used to create the folders is now in the HomeFolderManager.
- Re-factor homeFolderProviderSynchronizer to handle HomeFolderProvider2.
- Addition of AbstractHomeFolderProvider.V2Adaptor to allow external providers
that extend AbstractHomeFolderPathProvider to be handled by
homeFolderProviderSynchronizer.
28860: Minor change to class comment and removed unused imports
28858: ALF-4727 Hashed home folder provider added and used by default for LDAP sync users - based on Romain Guinot work.
ALF-7797 HomeFolderProviderSynchronizer added to move existing users (normally those added by LDAP sync) into location preferred by home folder provider.
- HomeFolderProviderSynchronizer bug fixes
- tenant accounts supported for first time
- addition of a phase to create parent folders before moving home folder to avoid a race condition
- check for conditions that would result in FileExistExceptions as we don't want a the transaction to be discarded as this results in retries.
- HomeFolderProviderSynchronizerTest integration test including tenant services
- HomeFolderManager now sets the HOME_FOLDER_PROVIDER if it uses a default when HOME_FOLDER_PROVIDER is not set.
- AbstractHomeFolderProvider clears cache when path reset as it will be invalid.
- UIDBasedHomeFolderProvider.createNewParent creates its own mutable List as the one passed in may not be mutable.
28580: Save code changes - added comments to do with LDAP syn overriding the HFP value and related to this added a global property to keep empty parent folders.
28347: HomeFolderProviderSynchronizer
- issue to do with new run of sync having created a user via UI that has a home folder as one of the parent folders.
- issue to do with catching exception when creating temporary folder - transaction is gone
- give up if error in any phase
28298: Addition of HomeFolderPathProvider (based on Romain's work) and addition of HomeFolderProviderSynchronizer.
28956: Merged DEV to V3.4-BUG-FIX
ALF-9428: Multitenancy users not preserved after upgrade from 3.2.2.7 to 3.4.2
- Provide correct RunAs context in FixUserQNamesPatch batching.
28941: ALF-9361 : CLONE -sync Flat IMAP client with Alfresco is slow and inaccurate
28916: ALF-9421 The AlfrescoJavaScript action now includes company home in the JavaScript scope.
28879: Fixed ALF-9296: Alfresco Dashboard: Impossible to approve/reject task from My Tasks dashlet on My Alfresco
28875: Fixed ALF-6329: SPANISH - Share, translation on Transfer Target configuration
28864: Message:
ALF-9430: RuntimeExec waitForCompletion logic is obscure
- Only a single flag 'isCompleted'
- Set flag in try-finally
- Added notify()
However, the wait() code doesn't, in practice, get called because the waitForCompletion is synchronized with the run()
and is called a while after the reading thread is triggered. So the logic is less obscure and safer for the finally.
28800: File for rev 28799: ALF-9240
28799: Merged DEV to V3.4-BUG-FIX
28797: ALF-9240: Issue with adding an aspect with large multivalued list
Added unit test to stress, but could not reproduce
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@28995 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
126 lines
6.0 KiB
Properties
126 lines
6.0 KiB
Properties
# This flag enables use of this LDAP subsystem for authentication. It may be
|
|
# that this subsytem should only be used for synchronization, in which case
|
|
# this flag should be set to false.
|
|
ldap.authentication.active=true
|
|
|
|
#
|
|
# This properties file brings together the common options for LDAP authentication rather than editing the bean definitions
|
|
#
|
|
ldap.authentication.allowGuestLogin=true
|
|
# How to map the user id entered by the user to that passed through to LDAP
|
|
# - simple
|
|
# - this must be a DN and would be something like
|
|
# uid=%s,ou=People,dc=company,dc=com
|
|
# - digest
|
|
# - usually pass through what is entered
|
|
# %s
|
|
# If not set, an LDAP query involving ldap.synchronization.personQuery and ldap.synchronization.userIdAttributeName will
|
|
# be performed to resolve the DN dynamically. This allows directories to be structured and doesn't require the user ID to
|
|
# appear in the DN.
|
|
ldap.authentication.userNameFormat=
|
|
|
|
# The LDAP context factory to use
|
|
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
|
|
|
|
# The URL to connect to the LDAP server
|
|
ldap.authentication.java.naming.provider.url=ldap://openldap.domain.com:389
|
|
|
|
# The authentication mechanism to use for password validation
|
|
ldap.authentication.java.naming.security.authentication=simple
|
|
|
|
# Escape commas entered by the user at bind time
|
|
# Useful when using simple authentication and the CN is part of the DN and contains commas
|
|
ldap.authentication.escapeCommasInBind=false
|
|
|
|
# Escape commas entered by the user when setting the authenticated user
|
|
# Useful when using simple authentication and the CN is part of the DN and contains commas, and the escaped \, is
|
|
# pulled in as part of an LDAP sync
|
|
# If this option is set to true it will break the default home folder provider as space names can not contain \
|
|
ldap.authentication.escapeCommasInUid=false
|
|
|
|
# Comma separated list of user names who should be considered administrators by default
|
|
ldap.authentication.defaultAdministratorUserNames=
|
|
|
|
# This flag enables use of this LDAP subsystem for user and group
|
|
# synchronization. It may be that this subsytem should only be used for
|
|
# authentication, in which case this flag should be set to false.
|
|
ldap.synchronization.active=true
|
|
|
|
# The authentication mechanism to use for synchronization
|
|
ldap.synchronization.java.naming.security.authentication=simple
|
|
|
|
# The default principal to use (only used for LDAP sync)
|
|
ldap.synchronization.java.naming.security.principal=cn\=Manager,dc\=company,dc\=com
|
|
|
|
# The password for the default principal (only used for LDAP sync)
|
|
ldap.synchronization.java.naming.security.credentials=secret
|
|
|
|
# If positive, this property indicates that RFC 2696 paged results should be
|
|
# used to split query results into batches of the specified size. This
|
|
# overcomes any size limits imposed by the LDAP server.
|
|
ldap.synchronization.queryBatchSize=0
|
|
|
|
# If positive, this property indicates that range retrieval should be used to fetch
|
|
# multi-valued attributes (such as member) in batches of the specified size.
|
|
# Overcomes any size limits imposed by Active Directory.
|
|
ldap.synchronization.attributeBatchSize=0
|
|
|
|
# The query to select all objects that represent the groups to import.
|
|
ldap.synchronization.groupQuery=(objectclass\=groupOfNames)
|
|
|
|
# The query to select objects that represent the groups to import that have changed since a certain time.
|
|
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=groupOfNames)(!(modifyTimestamp<\={0})))
|
|
|
|
# The query to select all objects that represent the users to import.
|
|
ldap.synchronization.personQuery=(objectclass\=inetOrgPerson)
|
|
|
|
# The query to select objects that represent the users to import that have changed since a certain time.
|
|
ldap.synchronization.personDifferentialQuery=(&(objectclass\=inetOrgPerson)(!(modifyTimestamp<\={0})))
|
|
|
|
# The group search base restricts the LDAP group query to a sub section of tree on the LDAP server.
|
|
ldap.synchronization.groupSearchBase=ou\=Groups,dc\=company,dc\=com
|
|
|
|
# The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.
|
|
ldap.synchronization.userSearchBase=ou\=People,dc\=company,dc\=com
|
|
|
|
# The name of the operational attribute recording the last update time for a group or user.
|
|
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
|
|
|
|
# The timestamp format. Unfortunately, this varies between directory servers.
|
|
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'
|
|
|
|
# The attribute name on people objects found in LDAP to use as the uid in Alfresco
|
|
ldap.synchronization.userIdAttributeName=uid
|
|
|
|
# The attribute on person objects in LDAP to map to the first name property in Alfresco
|
|
ldap.synchronization.userFirstNameAttributeName=givenName
|
|
|
|
# The attribute on person objects in LDAP to map to the last name property in Alfresco
|
|
ldap.synchronization.userLastNameAttributeName=sn
|
|
|
|
# The attribute on person objects in LDAP to map to the email property in Alfresco
|
|
ldap.synchronization.userEmailAttributeName=mail
|
|
|
|
# The attribute on person objects in LDAP to map to the organizational id property in Alfresco
|
|
ldap.synchronization.userOrganizationalIdAttributeName=o
|
|
|
|
# The default home folder provider to use for people created via LDAP import
|
|
ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider
|
|
|
|
# The attribute on LDAP group objects to map to the authority name property in Alfresco
|
|
ldap.synchronization.groupIdAttributeName=cn
|
|
|
|
# The attribute on LDAP group objects to map to the authority display name property in Alfresco
|
|
ldap.synchronization.groupDisplayNameAttributeName=description
|
|
|
|
# The group type in LDAP
|
|
ldap.synchronization.groupType=groupOfNames
|
|
|
|
# The person type in LDAP
|
|
ldap.synchronization.personType=inetOrgPerson
|
|
|
|
# The attribute in LDAP on group objects that defines the DN for its members
|
|
ldap.synchronization.groupMemberAttributeName=member
|
|
|
|
# If true progress estimation is enabled. When enabled, the user query has to be run twice in order to count entries.
|
|
ldap.synchronization.enableProgressEstimation=true |