Expand my Community achievements bar.

LDAP groups are not syncing in AEM 6.3 (CFP2)

Avatar

Level 1

Hi All, External groups are not being auto created in AEM. I see below WARN message in the logs. At high level, it's failing to get details of group

(entry.hasObjectClass(config.getGroupConfig().getObjectClasses()))

23.02.2018 18:12:00.026 *DEBUG* [qtp2061537588-4614] org.apache.jackrabbit.oak.security.authentication.ldap.impl.LdapIdentityProvider getDeclaredGroupRefs: search below ou=groups,dc=<domain>,dc=com with (&(uniquemember=uid=<user>,ou=users,dc=<domain>,dc=com)(objectclass=groupofuniquenames)) found 3 entries. (connect=93.82ms, search=848.51us, iterate=46.57ms)

23.02.2018 18:12:00.167 *WARN* [qtp2061537588-4614] org.apache.jackrabbit.oak.security.authentication.ldap.impl.LdapIdentityProvider referenced identity is neither user or group: cn=G-INT-AEM-<Project1>-Authors,ou=groups,dc=<domain>,dc=com;stage_ldap1

23.02.2018 18:12:00.318 *WARN* [qtp2061537588-4614] org.apache.jackrabbit.oak.security.authentication.ldap.impl.LdapIdentityProvider referenced identity is neither user or group: cn=G-INT-AEM-<Project2>-Authors,ou=groups,dc=<domain>,dc=com;stage_ldap1

23.02.2018 18:12:00.470 *WARN* [qtp2061537588-4614] org.apache.jackrabbit.oak.security.authentication.ldap.impl.LdapIdentityProvider referenced identity is neither user or group: cn=G-INT-AEM-<Project3>-Developers,ou=groups,dc=<domain>,dc=com;stage_ldap1

Appreciate your pointers on the issue..

2 Replies

Avatar

Level 10

Hi Harish,

Please refer this community articles which will help you to integrate LDAP with AEM. It works nicely.

INTEGRATE AEM WITH LDAP | Adobe AEM Club

If you face any issues, please let us know.

Thanks,

Ratna Kumar.

Avatar

Level 1

Thanks, Ratna Kumar for your answer.

I do not see any issues with integrating AEM with LDAP.  Recently we have migrated AEM 6.1 to 6.3 and we are seeing the WARN message. (LDAP group auto creation was working earlier) I wanted to understand what is the WARN message means.