1- This section is wrong sure:
2- The section below is also wrong:
I suggest review the sample from here https://docs.openkm.com/kcenter/view/ok ... roles.html and consider the issue was on much restrictive base, you should use "DC=*****,DC=***" as Base for filtering. I suspect roles are outside the base you have set and that the reason why are not applyed.
If it goes right at the end I suggest apply some restriction like what is shown below:
Code: Select all
Should be only:
<beans:constructor-arg value="OU=IT,OU=CDG,OU=SDA,DC=*****,DC=***"/>
Code: Select all
You have with it wrong in two section of the XML<beans:constructor-arg value="DC=*****,DC=***"/>
2- The section below is also wrong:
Code: Select all
should be
<beans:constructor-arg index="1" value="CN={0}" />
Code: Select all
3- Try accessing to IP directly rather than ldap://sd01cdgdc:389 ( might be you have balanced domain server etc... and there's some issue there ). But I think issue is not here, is in point 1<beans:constructor-arg index="1" value="sAMAccountName={0}" />
I suggest review the sample from here https://docs.openkm.com/kcenter/view/ok ... roles.html and consider the issue was on much restrictive base, you should use "DC=*****,DC=***" as Base for filtering. I suspect roles are outside the base you have set and that the reason why are not applyed.
If it goes right at the end I suggest apply some restriction like what is shown below:
Code: Select all
(&(sAMAccountName={0})(|(memberOf=CN=ROLE_ADMIN,OU=OpenKM,DC=company,DC=com)(memberOf=CN=ROLE_USER,OU=OpenKM,DC=company,DC=com)))