Issue #512 has been updated by Clément OUDOT.

Status changed from New to Assigned
Assigned to set to Clément OUDOT
Target version deleted (2.0)

First, which version of LSC do you use? 2.0rc2 is a little buggy, and you 
should use 2.0 from the SVN. Then, the best place for this kind of request is 
the user mailing, as this might not be a software bug, but a configuration 
problem.
----------------------------------------
Bug #512: Error populating Active Directory from OpenLDAP
http://tools.lsc-project.org/issues/512

Author: Pierre Serrano
Status: Assigned
Priority: Normal
Assigned to: Clément OUDOT
Category: Core
Target version: 
Problem in version: 


Hi,
We tried to migrate our OpenLDAP users in an AD.
So, with some help of the wiki 
http://lsc-project.org/wiki/documentation/2.0/tutorials/openldaptoactivedirectory,
we made an lsc.xml file but we've got this error:
juil. 18 17:26:11 - DEBUG - Loading XML configuration from: 
/home/serrano/LSC/etc/lsc.xml
juil. 18 17:26:12 - INFO  - Logging configuration successfully loaded from 
/home/serrano/LSC/etc/logback.xml 
juil. 18 17:26:12 - INFO  - LSC configuration successfully loaded from 
/home/serrano/LSC/etc/
juil. 18 17:26:12 - ERROR - org.lsc.exception.LscConfigurationException: 
java.lang.reflect.InvocationTargetException
Last log file line: 2012/07/18 17:26:11 [lsc] Starting LSC

Here is the lsc.xml

@<?xml version="1.0" ?>

<lsc xmlns="http://lsc-project.org/XSD/lsc-core-2.0.xsd"; revision="0">

  <connections>

    <ldapConnection>
      <name>ad</name>
      <url>ldap://ad.xxxx.lan</url>
      <username>cn=administrateur,ou=Users,dc=xxxx,dc=lan</username>
      <password>xxxxxx</password>
      <authentication>SIMPLE</authentication>
      <referral>IGNORE</referral>
      <derefAliases>NEVER</derefAliases>
      <version>VERSION_3</version>
      <pageSize>1000</pageSize>
      <factory>com.sun.jndi.ldap.LdapCtxFactory</factory>
      <tlsActivated>false</tlsActivated>
    </ldapConnection>

    <ldapConnection>
      <name>openldap</name>
      <url>ldap://ldap.xxxx.xxxx.fr</url>
      <username>cn=admin,dc=xxxx,dc=xxxx,dc=fr</username>
      <password>xxxxxx</password>
      <authentication>SIMPLE</authentication>
    </ldapConnection>
  </connections>


  <audits>

        <csvAudit>
                <name>csv</name>
                <append>true</append>
                <operations>create, delete</operations>
                <file>/tmp/dump.csv</file>
                <datasets>cn, dn</datasets>
                <separator>,</separator>
        </csvAudit>
  </audits>


  <tasks>

    <task>

      <name>adUser</name>
      <bean>org.lsc.beans.SimpleBean</bean>
      <ldapSourceService>
        <name>openldap-src-service</name>
        <connection reference="openldap" />
        <baseDn>ou=people,dc=xxxx,dc=xxxx,dc=fr</baseDn>
        <pivotAttributes><string>uid</string></pivotAttributes>
        <fetchedAttributes>
          <string>description</string>
          <string>cn</string>
          <string>sn</string>
          <string>userPassword</string>
          <string>objectClass</string>
          <string>uid</string>
          <string>mail</string>
        </fetchedAttributes>
        <getAllFilter>((uid=*)(objectClass=inetOrgPerson))</getAllFilter>
        <getOneFilter>((objectClass=user)(sAMAccountName={uid}))</getOneFilter>
      </ldapSourceService>

      <ldapDestinationService>
        <name>ad-dst-service</name>
        <connection reference="ad" />
        <baseDn>ou=Users,dc=xxxx,dc=lan</baseDn>
        <getAllFilter>((sAMAccountName=*)(objectClass=user))</getAllFilter>
        <getOneFilter>((objectClass=inetOrgPerson)(uid={uid}))</getOneFilter>
      
      </ldapDestinationService>


  <propertiesBasedSyncOptions>
    <mainIdentifier>"cn=" + srcBean.getDatasetFirstValueById("cn") + 
",ou=users"</mainIdentifier>
    <defaultDelimiter>;</defaultDelimiter>
    <defaultPolicy>FORCE</defaultPolicy>
    <dataset>
     <name>objectClass</name>
     <policy>FORCE</policy>
     <forceValues>
      <string>"top";"user";"person";"organizationalPerson"</string>
     </forceValues>
    </dataset>
    <dataset>
     <name>sAMAccountName</name>
     <policy>KEEP</policy>
     <createValues>
      <string>srcBean.getDatasetFirstValueById("uid")</string>
     </createValues>
    </dataset>
    <dataset>
     <name>userPrincipalName</name>
     <policy>FORCE</policy>
     <forceValues>
      <string>srcBean.getDatasetFirstValueById("uid") + "@xxxx.lan"</string>
     </forceValues>
    </dataset>
    <dataset>
     <name>userAccountControl</name>
     <policy>KEEP</policy>
     <createValues>
      <string>AD.userAccountControlSet( "0", 
[AD.UAC_SET_NORMAL_ACCOUNT])</string>
     </createValues>
    </dataset>
    <dataset>
     <name>pwdLastSet</name>
     <policy>KEEP</policy>
     <createValues>
      <string>"0"</string>
     </createValues>
    </dataset>
    <dataset>
     <name>unicodePwd</name>
     <policy>KEEP</policy>
     <createValues>
      <string>AD.getUnicodePwd("changeit")</string>
     </createValues>
        </dataset>
      </propertiesBasedSyncOptions>
    </task>
  </tasks>
  <security>
    <encryption>
      <keyfile>etc/lsc.key</keyfile>
      <algorithm>AES</algorithm>
      <strength>128</strength>
    </encryption>
  </security>
</lsc>
@


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://tools.lsc-project.org/my/account
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-dev mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-dev

Reply via email to