Auto-Populate Contact List

Openfire Openfire Support
1

Hi everyone,

Apologies if this has been covered elsehwere.

I have Active Directory integrated in to OpenFire and successfully got it only searching members in an Active Directory group of Openfire. However, I now want to push this list of users as contacts to everyone via Openfire/Spark. Using a forum search I came upon instructions to create a Group in Users/Groups in the Openfire administration panel.

Unfortunately it doesn’'t let me create this group and suggests I check the error logs. Am I doing the wrong thing? Please see below for the error in error.log

2007.05.31 16:18:06 org.jivesoftware.openfire.admin.group_002dcreate_jsp._jspService(group_002dcreat e_jsp.java:123)

java.lang.UnsupportedOperationException

at org.jivesoftware.openfire.ldap.LdapGroupProvider.createGroup(LdapGroupProvider. java:67)

at org.jivesoftware.openfire.group.GroupManager.createGroup(GroupManager.java:157)

at org.jivesoftware.openfire.admin.group_002dcreate_jsp._jspService(group_002dcrea te_jsp.java:105)

at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:97)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)

at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:491)

at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1074)

at com.opensymphony.module.sitemesh.filter.PageFilter.parsePage(PageFilter.java:11 8)

at com.opensymphony.module.sitemesh.filter.PageFilter.doFilter(PageFilter.java:52)

at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1065)

at org.jivesoftware.util.LocaleFilter.doFilter(LocaleFilter.java:65)

at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1065)

at org.jivesoftware.util.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingF ilter.java:41)

at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1065)

at org.jivesoftware.admin.PluginFilter.doFilter(PluginFilter.java:69)

at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1065)

at org.jivesoftware.admin.AuthCheckFilter.doFilter(AuthCheckFilter.java:98)

at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1065)

at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:365)

at org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:185)

at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:181)

at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:689)

at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:391)

at org.mortbay.jetty.handler.ContextHandlerCollection.handle(ContextHandlerCollect ion.java:146)

at org.mortbay.jetty.handler.HandlerCollection.handle(HandlerCollection.java:114)

at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:139)

at org.mortbay.jetty.Server.handle(Server.java:285)

at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:457)

at org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:765 )

at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:627)

at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:209)

at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:357)

at org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:329)

at org.mortbay.thread.BoundedThreadPool$PoolThread.run(BoundedThreadPool.java:475)

2

we are using a similar setup. The group has to exist in active directory first, and then openfire just finds the group and its members. You should be able to go to the user/group page and you should also see your active directory groups in the group summary.

Also openfire connects to active directory in read-only, so you won’'t be able to create objects in AD thru openfire.

3

This is pretty easy, It’'s just not obvious.

Create a new group in AD (Global, Distribution)

Toss a few users in

close ADU&C

OPen Wildfire admin console

Users/groups tab

Group summary

Find the group you created below, click on it.

You should see a list of members below already. (If none are listed, you may have specified the wrong type of group)

Click Enable contact list group sharing, give it a name, save settings.

Either wait or restart you SPARK client.

That’'s about it.

Tim

4

Thanks Timothy.

I originally had my AD Openfire group as a security group, but I’‘ve since changed it to a distribution group. However, I still don’'t have any groups showing up in the Openfire administration site.

I’‘m going to assume my group search filter is wrong, I’'ve tried the following filters but I continiously get no groups showing up in the group summary.

(objectClass=group)

(&(objectclass=group)(OU=Distribution Groups,OU=MyBusiness,DC=domain,DC=lan))

(&(cn=)(OU=Distribution Groups,OU=MyBusiness,DC=domain,DC=lan))
(&(cn=)(OU=Distribution Groups,OU=MyBusiness,DC=domain,DC=lan))

(&(cn=)(OU=Distribution Groups,OU=MyBusiness,DC=domain,DC=lan,objectClass=group))

(OU=Distribution Groups,OU=MyBusiness,DC=domain,DC=lan,objectClass=group)

Anyone willing to help with the group search filter I need to use? Below is a link to a screenshot of my AD layout, please ignore the black boxes. It’‘s either someone’'s last name or just use DC=domain

5

how about starting with something simple like:

that should give you every group in AD as long as you have your base DN set to

OU=MyBusiness,DC=domain,DC=lan

6

Got it!

My group search filter wasn’'t at fault at all, it was my Base DN which was the problem as I had specified it too much.

I had used “OU=SBSUsers,OU=Users,OU=MyBusiness;DC=domain,DC=lan” as the base DN which doesn’'t cover my groups. I used “OU=MyBusiness;DC=domain,DC=lan” and it works great.

Thanks to all that helped.

7

Good timing!

8

Ok, we’‘re set up with AD and groups, but now I want to push the groups to the spark client automatically… is there any way I can do this without having to go into the admin console and giving a group name for the contact list settings? I want to just create a group in AD and automatically have that group show up in the spark client, without having to take the extra step to “turn it on” in the openfire admin console… i’'d just like the group name pushed to the clients to be the same as the AD group name, or better yet the AD group description… any ideas?