Issue #512 has been updated by Pierre Serrano.

Pierre Serrano wrote:
> Hi,
> We tried to migrate our OpenLDAP users in an AD.
> So, with some help of the wiki 
> http://lsc-project.org/wiki/documentation/2.0/tutorials/openldaptoactivedirectory,
> we made an lsc.xml file but we've got this error:
> juil. 18 17:26:11 - DEBUG - Loading XML configuration from: 
> /home/serrano/LSC/etc/lsc.xml
> juil. 18 17:26:12 - INFO  - Logging configuration successfully loaded from 
> /home/serrano/LSC/etc/logback.xml 
> juil. 18 17:26:12 - INFO  - LSC configuration successfully loaded from 
> /home/serrano/LSC/etc/
> juil. 18 17:26:12 - ERROR - org.lsc.exception.LscConfigurationException: 
> java.lang.reflect.InvocationTargetException
> Last log file line: 2012/07/18 17:26:11 [lsc] Starting LSC
> 
> Here is the lsc.xml
> 
> <?xml version="1.0" ?>
> 
> <lsc xmlns="http://lsc-project.org/XSD/lsc-core-2.0.xsd"; revision="0">
> 
>   <connections>
> 
>     <ldapConnection>
>       <name>ad</name>
>       <url>ldap://ad.xxxx.lan</url>
>       <username>cn=administrateur,ou=Users,dc=xxxx,dc=lan</username>
>       <password>xxxxxx</password>
>       <authentication>SIMPLE</authentication>
>       <referral>IGNORE</referral>
>       <derefAliases>NEVER</derefAliases>
>       <version>VERSION_3</version>
>       <pageSize>1000</pageSize>
>       <factory>com.sun.jndi.ldap.LdapCtxFactory</factory>
>       <tlsActivated>false</tlsActivated>
>     </ldapConnection>
> 
>     <ldapConnection>
>       <name>openldap</name>
>       <url>ldap://ldap.xxxx.xxxx.fr</url>
>       <username>cn=admin,dc=xxxx,dc=xxxx,dc=fr</username>
>       <password>xxxxxx</password>
>       <authentication>SIMPLE</authentication>
>     </ldapConnection>
>   </connections>
> 
> 
>   <audits>
> 
>       <csvAudit>
>               <name>csv</name>
>               <append>true</append>
>               <operations>create, delete</operations>
>               <file>/tmp/dump.csv</file>
>               <datasets>cn, dn</datasets>
>               <separator>,</separator>
>       </csvAudit>
>   </audits>
> 
> 
>   <tasks>
> 
>     <task>
> 
>       <name>adUser</name>
>       <bean>org.lsc.beans.SimpleBean</bean>
>       <ldapSourceService>
>         <name>openldap-src-service</name>
>         <connection reference="openldap" />
>         <baseDn>ou=people,dc=xxxx,dc=xxxx,dc=fr</baseDn>
>       <pivotAttributes><string>uid</string></pivotAttributes>
>         <fetchedAttributes>
>           <string>description</string>
>           <string>cn</string>
>           <string>sn</string>
>           <string>userPassword</string>
>           <string>objectClass</string>
>           <string>uid</string>
>           <string>mail</string>
>         </fetchedAttributes>
>         <getAllFilter>((uid=*)(objectClass=inetOrgPerson))</getAllFilter>
>         
> <getOneFilter>((objectClass=user)(sAMAccountName={uid}))</getOneFilter>
>       </ldapSourceService>
> 
>       <ldapDestinationService>
>         <name>ad-dst-service</name>
>         <connection reference="ad" />
>         <baseDn>ou=Users,dc=xxxx,dc=lan</baseDn>
>         <getAllFilter>((sAMAccountName=*)(objectClass=user))</getAllFilter>
>         <getOneFilter>((objectClass=inetOrgPerson)(uid={uid}))</getOneFilter>
>       
>       </ldapDestinationService>
> 
> 
>   <propertiesBasedSyncOptions>
>     <mainIdentifier>"cn=" + srcBean.getDatasetFirstValueById("cn") + 
> ",ou=users"</mainIdentifier>
>     <defaultDelimiter>;</defaultDelimiter>
>     <defaultPolicy>FORCE</defaultPolicy>
>     <dataset>
>      <name>objectClass</name>
>      <policy>FORCE</policy>
>      <forceValues>
>       <string>"top";"user";"person";"organizationalPerson"</string>
>      </forceValues>
>     </dataset>
>     <dataset>
>      <name>sAMAccountName</name>
>      <policy>KEEP</policy>
>      <createValues>
>       <string>srcBean.getDatasetFirstValueById("uid")</string>
>      </createValues>
>     </dataset>
>     <dataset>
>      <name>userPrincipalName</name>
>      <policy>FORCE</policy>
>      <forceValues>
>       <string>srcBean.getDatasetFirstValueById("uid") + "@xxxx.lan"</string>
>      </forceValues>
>     </dataset>
>     <dataset>
>      <name>userAccountControl</name>
>      <policy>KEEP</policy>
>      <createValues>
>       <string>AD.userAccountControlSet( "0", 
> [AD.UAC_SET_NORMAL_ACCOUNT])</string>
>      </createValues>
>     </dataset>
>     <dataset>
>      <name>pwdLastSet</name>
>      <policy>KEEP</policy>
>      <createValues>
>       <string>"0"</string>
>      </createValues>
>     </dataset>
>     <dataset>
>      <name>unicodePwd</name>
>      <policy>KEEP</policy>
>      <createValues>
>       <string>AD.getUnicodePwd("changeit")</string>
>      </createValues>
>         </dataset>
>       </propertiesBasedSyncOptions>
>     </task>
>   </tasks>
>   <security>
>     <encryption>
>       <keyfile>etc/lsc.key</keyfile>
>       <algorithm>AES</algorithm>
>       <strength>128</strength>
>     </encryption>
>   </security>
> </lsc>

----------------------------------------
Bug #512: Error populating Active Directory from OpenLDAP
http://tools.lsc-project.org/issues/512

Author: Pierre Serrano
Status: New
Priority: Normal
Assigned to: 
Category: Core
Target version: 2.0
Problem in version: 


Hi,
We tried to migrate our OpenLDAP users in an AD.
So, with some help of the wiki 
http://lsc-project.org/wiki/documentation/2.0/tutorials/openldaptoactivedirectory,
we made an lsc.xml file but we've got this error:
juil. 18 17:26:11 - DEBUG - Loading XML configuration from: 
/home/serrano/LSC/etc/lsc.xml
juil. 18 17:26:12 - INFO  - Logging configuration successfully loaded from 
/home/serrano/LSC/etc/logback.xml 
juil. 18 17:26:12 - INFO  - LSC configuration successfully loaded from 
/home/serrano/LSC/etc/
juil. 18 17:26:12 - ERROR - org.lsc.exception.LscConfigurationException: 
java.lang.reflect.InvocationTargetException
Last log file line: 2012/07/18 17:26:11 [lsc] Starting LSC

Here is the lsc.xml

@<?xml version="1.0" ?>

<lsc xmlns="http://lsc-project.org/XSD/lsc-core-2.0.xsd"; revision="0">

  <connections>

    <ldapConnection>
      <name>ad</name>
      <url>ldap://ad.xxxx.lan</url>
      <username>cn=administrateur,ou=Users,dc=xxxx,dc=lan</username>
      <password>xxxxxx</password>
      <authentication>SIMPLE</authentication>
      <referral>IGNORE</referral>
      <derefAliases>NEVER</derefAliases>
      <version>VERSION_3</version>
      <pageSize>1000</pageSize>
      <factory>com.sun.jndi.ldap.LdapCtxFactory</factory>
      <tlsActivated>false</tlsActivated>
    </ldapConnection>

    <ldapConnection>
      <name>openldap</name>
      <url>ldap://ldap.xxxx.xxxx.fr</url>
      <username>cn=admin,dc=xxxx,dc=xxxx,dc=fr</username>
      <password>xxxxxx</password>
      <authentication>SIMPLE</authentication>
    </ldapConnection>
  </connections>


  <audits>

        <csvAudit>
                <name>csv</name>
                <append>true</append>
                <operations>create, delete</operations>
                <file>/tmp/dump.csv</file>
                <datasets>cn, dn</datasets>
                <separator>,</separator>
        </csvAudit>
  </audits>


  <tasks>

    <task>

      <name>adUser</name>
      <bean>org.lsc.beans.SimpleBean</bean>
      <ldapSourceService>
        <name>openldap-src-service</name>
        <connection reference="openldap" />
        <baseDn>ou=people,dc=xxxx,dc=xxxx,dc=fr</baseDn>
        <pivotAttributes><string>uid</string></pivotAttributes>
        <fetchedAttributes>
          <string>description</string>
          <string>cn</string>
          <string>sn</string>
          <string>userPassword</string>
          <string>objectClass</string>
          <string>uid</string>
          <string>mail</string>
        </fetchedAttributes>
        <getAllFilter>((uid=*)(objectClass=inetOrgPerson))</getAllFilter>
        <getOneFilter>((objectClass=user)(sAMAccountName={uid}))</getOneFilter>
      </ldapSourceService>

      <ldapDestinationService>
        <name>ad-dst-service</name>
        <connection reference="ad" />
        <baseDn>ou=Users,dc=xxxx,dc=lan</baseDn>
        <getAllFilter>((sAMAccountName=*)(objectClass=user))</getAllFilter>
        <getOneFilter>((objectClass=inetOrgPerson)(uid={uid}))</getOneFilter>
      
      </ldapDestinationService>


  <propertiesBasedSyncOptions>
    <mainIdentifier>"cn=" + srcBean.getDatasetFirstValueById("cn") + 
",ou=users"</mainIdentifier>
    <defaultDelimiter>;</defaultDelimiter>
    <defaultPolicy>FORCE</defaultPolicy>
    <dataset>
     <name>objectClass</name>
     <policy>FORCE</policy>
     <forceValues>
      <string>"top";"user";"person";"organizationalPerson"</string>
     </forceValues>
    </dataset>
    <dataset>
     <name>sAMAccountName</name>
     <policy>KEEP</policy>
     <createValues>
      <string>srcBean.getDatasetFirstValueById("uid")</string>
     </createValues>
    </dataset>
    <dataset>
     <name>userPrincipalName</name>
     <policy>FORCE</policy>
     <forceValues>
      <string>srcBean.getDatasetFirstValueById("uid") + "@xxxx.lan"</string>
     </forceValues>
    </dataset>
    <dataset>
     <name>userAccountControl</name>
     <policy>KEEP</policy>
     <createValues>
      <string>AD.userAccountControlSet( "0", 
[AD.UAC_SET_NORMAL_ACCOUNT])</string>
     </createValues>
    </dataset>
    <dataset>
     <name>pwdLastSet</name>
     <policy>KEEP</policy>
     <createValues>
      <string>"0"</string>
     </createValues>
    </dataset>
    <dataset>
     <name>unicodePwd</name>
     <policy>KEEP</policy>
     <createValues>
      <string>AD.getUnicodePwd("changeit")</string>
     </createValues>
        </dataset>
      </propertiesBasedSyncOptions>
    </task>
  </tasks>
  <security>
    <encryption>
      <keyfile>etc/lsc.key</keyfile>
      <algorithm>AES</algorithm>
      <strength>128</strength>
    </encryption>
  </security>
</lsc>
@


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://tools.lsc-project.org/my/account
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-dev mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-dev

Reply via email to