Hi,
Alfresco Community 6.1 with AD sync and kerberos sso periodicaly generate internal users with names of <hostname>$. The client computer host name do not present in user AD information at all. It's not corelated in time with syncronization service. New users appears not for all AD users. It have some corelation with user activities in the system, but we can't catch witch activity. Deleted ghost users arise again.
It's an interesting point, this ghosts has logged into system when their parent users (the owners of hosts) was logged on, but dose not make any activities.
Thanks for any advice.
Can you check this property?
LDAP authentication properties
Thanks a lot! I'll try create.missing.people=false tonight.
What the differances betwin two properties
synchronization.autoCreatePeopleOnLogin
and
create.missing.people ?
create.missing.people is more general and governs the internal API of PersonService.getPerson(String) - when you ask for a person by name and that person does not exist, it will create that persion if create.missing.people is set to true
synchronization.autoCreatePeopleOnLogin is more specific and only creates non-existing people if they actually login but cannot be synchronised on-demand
Our best practices is to set both mentioned parameters to false.
Depending on your user base and sync ldap config your system may sync all the time since every time the ldap auth subsystem recognizes a failed auth in the chain a new sync will be spawned.
# Should we auto create a missing person on log in? # Bad idea if running with a large user base synchronization.syncWhenMissingPeopleLogIn=false # Should we auto create a missing person on log in? # Never ever enable this option since Alfresco doesn't # sync the user and additional doesn't respect ldap filters synchronization.autoCreatePeopleOnLogin=false
Ask for and offer help to other Alfresco Content Services Users and members of the Alfresco team.
Related links:
By using this site, you are agreeing to allow us to collect and use cookies as outlined in Alfresco’s Cookie Statement and Terms of Use (and you have a legitimate interest in Alfresco and our products, authorizing us to contact you in such methods). If you are not ok with these terms, please do not use this website.