How to Force synchronization of LDAP users with AEM 6 | Adobe Higher Education
Skip to main content
Level 2
October 16, 2015
Besvarat

How to Force synchronization of LDAP users with AEM 6

  • October 16, 2015
  • 13 svar
  • 5170 visningar

When an individual user (not yet registered in CRX) attempts to login, CRX authenticates against LDAP and if authentication is successful then that user is synchronized with CRX. So, How to force synchronization of LDAP users with CRX so that rights can be assigned before the user first tries to login?

This question is answered in this link for CRX 2.3 - I have similar issue and unable to find any solution in AEM 6.0.0.SP2.

Solution mentioned in above link doesn't work because AEM 6 don't have com.adobe.granite.ldap MBeans registered under JMX Web Console.

What's best way to solve this issue to force authorization of LDAP users with AEM ? I want to add users to AEM [from LDAP] and at the same time wanna add them to pre-defined AEM Groups [without them required to sign-in AEM].

Thanks,

Det här ämnet har stängts för svar.
Bästa svar av gopalKa

Sync on demand=sync while login. This is a available feature in the ldap config.

13 svar

Level 2
October 16, 2015

That don't solve problem I mentioned earlier..

How to force synchronization of LDAP users with AEM6 so that rights can be assigned before the user first tries to login?

Is there any documentation to follow to achieve this? 

October 16, 2015

Hi All,

I have ldap configured on AEM6.0SP2 - when I try to go to ldap jmx console I get

HTTP ERROR: 404

Problem accessing /system/console/jmx/org.apache.jackrabbit.oak%3Ahandler%3D%22lbow-ldap-sync%22%2Cidp%3D%22lbow-ldap%22%2Cname%3DExternal+Identity+Synchronization+Management%2Ctype%3DUserManagement. Reason:

Not Found

 


Powered by Jetty://

 

But I am able to login using my ldap credentials, but I need to perform purgeOrphaned users and syncexternal users again, but the operations are not accessible from jmx anymore, as I keep getting this 404 error.

The same configuration is working fine on our other environments, so it can't be anything to do with configurations we use. There's nothing on the logs except

Could anyone help us with this issue. thanks.

November 2, 2016

Vipal, did you ever find a solution to this?  We're on AEM 6.2 and are having the same issue.  Once a user authenticates, he's added to AEM from LDAP and belongs to xyz AEM groups, which also came from LDAP.  But if I update the user and add him to a group, and then login again as that user (or sync manually via JMX Console as admin), the new group never appears in AEM.  There seems to be a caching issue as AEM doesn't go back to LDAP since that user logged in before.  I cannot figure out how to disable caching, for purposes of syncing.