LDAP Group matching with AEM6

[Bxxs93]

Hey

How can i match the groups of a user from the LDAP with the groups in the CRX in AEM6 ? So that after he first sign in in AEM6 he automatically becomes a member of the same group in the CRX like the ones form LDAP.

thanks for your help

[Sham_HC]

Configure User auto membership http://docs.adobe.com/docs/en/aem/6-0/administer/security/ldap-config.html

[Bxxs93]

i used this option. But then every User gets automatically in this group (like everyone becomes administrator). But i want to match the Groups of a User from the LDAP with the groups of the user in the CRX. So that the user has automatically the same groups in the CRX like he has in the LDAP

[Sham_HC · Accepted solution]

I do not agree with statement like everyone becomes administrator because Everyone is special group in aem & i do not know how it become part of administrator.

Anyhow for your requirement need to write a custom syncHandler [1]  & the one that comes with out of the box default sync handler does not have an option. 

[1]    http://jackrabbit.apache.org/oak/docs/apidocs/org/apache/jackrabbit/oak/spi/security/authentication/...