Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In Alfresco, I want to specify that all users found under a particular DN should be considered as valid Alfresco users.

Problem: My users are split in many different OU sub-levels.

Will Alfresco be able to recursively find all users if I specify the DN as ldap.synchronization.userSearchBase?

share|improve this question
up vote 2 down vote accepted

I think I understand what you're after. Assuming I'm correct, you've got the same setup we have, and the simple answer is "Yes, it works"

Let's try for some ASCII art of a directory tree:

  |--->Special Accounts
  |--->Accounts (*)
       |-->Head Office Users
       |     |->Jim Smith
       |     |->Jane Jones
       |     |->Admin
       |-->Sales Office Users
       |     |->Anne Blogs
       |-->Remote Users
       |     |->Tom Blogs
             |->Normal Users

What I think you want is to have all of your users (head office, sales, remote etc) synced with Alfresco, and all the groups, but you want to avoid having accounts created for computers etc?

If so, set the sync to start at ou=Accounts,dc=root (ldap.synchronization.userSearchBase and ldap.synchronization.groupSearchBase) and it should just work

share|improve this answer
You understood right, thanks for the answer! – Nicolas Raoul Nov 30 '12 at 2:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.