How to Force synchronization of LDAP users with AEM 6 | Community
Skip to main content
V
vipulp33825167
Level 2
October 16, 2015
Solved

How to Force synchronization of LDAP users with AEM 6

  • October 16, 2015
  • 13 replies
  • 5213 views

When an individual user (not yet registered in CRX) attempts to login, CRX authenticates against LDAP and if authentication is successful then that user is synchronized with CRX. So, How to force synchronization of LDAP users with CRX so that rights can be assigned before the user first tries to login?

This question is answered in this link for CRX 2.3 - I have similar issue and unable to find any solution in AEM 6.0.0.SP2.

Solution mentioned in above link doesn't work because AEM 6 don't have com.adobe.granite.ldap MBeans registered under JMX Web Console.

What's best way to solve this issue to force authorization of LDAP users with AEM ? I want to add users to AEM [from LDAP] and at the same time wanna add them to pre-defined AEM Groups [without them required to sign-in AEM].

Thanks,

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by gopalKa

Sync on demand=sync while login. This is a available feature in the ldap config.

13 replies

Show previous replies
V
vipulp33825167Author
Level 2
October 16, 2015

Thanks Kalyanar,

We followed AEM 6 Docs to configure and connect to LDAP. 

While clicking on  "External Identity Synchronization Management" on JMX console, it throws 404. Not sure what's wrong.

HTTP ERROR: 404

Problem accessing /system/console/jmx/org.apache.jackrabbit.oak:handler%3d%22sync.corpAD%22%2cidp%3d%22corpAD%22%2cname%3dExternal%2bIdentity%2bSynchronization%2bManagement%2ctype%3dUserManagement. Reason:

Not Found

Is there any detail documentation to implement enforcement to sync. LDAP users in AEM.

Thanks,

G
Adobe Employee
gopalKaAdobe Employee
Adobe Employee
October 16, 2015
You will need LDAP configured on the server. Since in AEM 6, LDAP is in oak, it is in a different place..
 
Search for name "External Identity Synchronization Management" in the JMX Console. Here you will find all the LDAP related operations.
 
The syncExternalUsers([Ljava.lang.String;p1) should provide the same functionality, to sync new users from LDAP.
 
 

 

A
Anonymous
November 2, 2016

Vipal, did you ever find a solution to this?  We're on AEM 6.2 and are having the same issue.  Once a user authenticates, he's added to AEM from LDAP and belongs to xyz AEM groups, which also came from LDAP.  But if I update the user and add him to a group, and then login again as that user (or sync manually via JMX Console as admin), the new group never appears in AEM.  There seems to be a caching issue as AEM doesn't go back to LDAP since that user logged in before.  I cannot figure out how to disable caching, for purposes of syncing.

Terms & ConditionsAccessibility statement

Loading footer...