LDAP export, user account disabled in AD

[13年前 に Babette Wilmans によって更新されました。]

I connected liferay to Active Directory. The users are exported correctly and added to the correct group. However all newly created user accounts are disabled. This means that a user can nog logon with his AD credentials. Does anybody know why these users are disabled. Is this a liferay issue, or an AD issue?

These are my LDAP settings

User

Authentication search filter: (&(objectClass=person)(mail=@email_address@))
Screenname: cn
Password: userPassword
Email address: mail
Fullname: sAMAccountName
First name: givenName
Last name: sn
JobTitle: title
Group: memberOf


Group

group name: cn
description: sAMAccountName
User: member

Export

Users DN: OU=XXX,DC=XXX,DC=XXX
User Default Object Classes: top,person,user,organizationalPerson
Groups DN: OU=XXX,DC=XXX,DC=XXX
Group Default Object Classes: top,group

[13年前 に Koen Suilen によって更新されました。]

I read in th following link that Liferay does not really support creating users in the LDAP?AD, but rather can only update them. Not sure if this is still true for 6.0.5 anyone?

http://boardreader.com/thread/user_creation_problem_in_liferay_openlda_51zg6X2h9qy.html

[13年前 に Babette Wilmans によって更新されました。]

Looks like this is an AD issue. We installed Apache DS and it works fine. All user accounts are enabled when they are created by Liferay.

Could this be an AD configuration issue?

[9年前 に Abhi R によって更新されました。]

Hi Babette,

Did you ever that resolved? I'm facing the same issue with Liferay 6.1. My user is exported, but is disabled by default. I have to manually enable it. Is there a way to avoid that?

Thanks!

[9年前 に Flávio Gaspar によって更新されました。]

Im facing the same issue, does anyone knows the solution

[9年前 に Abhi R によって更新されました。]

I eventually fixed the issue by turning off user export in the Liferay LDAP wizard and writing a hook which using Java JNDI look to export users to AD. Here is a summary (along with the hook code) of what I did.
http://abhirampal.com/2014/12/20/liferay-ldap-export-to-active-directory-disabled-user-bug/
Any questions, feel free to ask!