Your achievements

Level 1

0% to

Level 2

Tip /
Sign in

Sign in to Community

to gain points, level up, and earn exciting badges like the new
Bedrock Mission!

Learn more

View all

Sign in to view all badges

artron
Community profile artron Level 2
Job title here
Location here
7 BADGES
Level 2

Level 2

Learn more
Joined the community 07-05-2014 1:06:04 PM
Offline
Top badges earned by artron
Customize the badges you want to showcase on your profile
active directory group sync
Avatar
Ignite 3
Level 2
artron
Level 2

Likes

2 likes

Total Posts

8 posts

Correct reply

0 solutions
Top badges earned
Ignite 3
Give Back 3
Give Back
Ignite 1
Validate 1
View profile
artron
- Adobe Experience Manager Forms
Greeting All,We have about 20,000 users and want to sync and continue to maintain a department as a subset of this group of users in AEM as a group. Is this possible using an Active Directory group via LDAP?I have explored doing this by the following without success:adding the group via /useradminadding the group via /crx/explorer group administrationtried the sync user function in JMX consoleThanks in advance,Shaun

Views

248

Likes

0

Replies

0
Re: active directory group sync
Avatar
Ignite 3
Level 2
artron
Level 2

Likes

2 likes

Total Posts

8 posts

Correct reply

0 solutions
Top badges earned
Ignite 3
Give Back 3
Give Back
Ignite 1
Validate 1
View profile
artron
- Adobe Experience Manager
Thanks Jorg, I am looking into what might be required to create a Java bean that syncs groups similar to the way the JMX console does with users. The "syncuser" bean in the JMX console does not delete users if they were deleted from the AD/LDAP group and I am looking into what is required to extend the functionality of the syncuser bean to do that. I have a ticket open with Adobe Daycare to attempt to address this issue and will post any progress or findings here.Shaun

Views

191

Likes

0

Replies

0
Re: is there any way to replicate users from auhtor to publisher?
Avatar
Ignite 10
Level 3
ahmedI
Level 3

Likes

9 likes

Total Posts

34 posts

Correct reply

3 solutions
Top badges earned
Ignite 10
Give Back 10
Ignite 5
Give Back 5
Ignite 3
View profile
ahmedI
- Adobe Experience Manager
I believe packaging the users will not Copy the ACL list, By doing package install you are just copying the Users/Groups but not the ACLs

Views

263

Likes

0

Replies

0
Re: groupFilter setup in ldap_login.conf
Avatar
Ignite 3
Level 2
artron
Level 2

Likes

2 likes

Total Posts

8 posts

Correct reply

0 solutions
Top badges earned
Ignite 3
Give Back 3
Give Back
Ignite 1
Validate 1
View profile
artron
- Adobe Experience Manager
Thanks Sham! I tried it out and had to roll back as apparently those two groups contain other groups which do not meet the above criteria. It's going to require a little more work on my part to figure this out. Your quick reply is greatly appreciated and nudge toward LDAP syntax was needed. Also, enjoyed perusing your blog. Very nice!

Views

172

Likes

0

Replies

0
Re: active directory group sync
Avatar
Coach
Employee
Jörg_Hoh
Employee

Likes

1,308 likes

Total Posts

3,286 posts

Correct reply

1,118 solutions
Top badges earned
Coach
Give back 600
Ignite 5
Ignite 3
Ignite 1
View profile
Jörg_Hoh
- Adobe Experience Manager
Not sure, what you want to achieve.You can sync users and groups based on LDAP filters into AEM. Normally one would maintain the group memberships and authentication stuff in the AD, and just use the groups in AEM, probably as basis for ACLs. That's the standard approach when you want to use a LDAP sync.Jörg

Views

339

Likes

0

Replies

0
Likes given to
Likes from