Hi Markham, You fixed it in the right way :)
Regards, -- Sebastien BAHLOUL IAM / Security specialist Ldap Synchronization Connector : http://lsc-project.org Blog : http://sbahloul.wordpress.com/ 2011/12/20 markham extra <[email protected]> > Hi, > *I try *with lsc.tasks.ADuser.srcService. > filterId = (&(objectClass=inetOrgPerson)(|(uid={uid})(uid={cn}))), > > but i 'have same result, then > i try with : > > lsc.tasks.ADuser.srcService. > filterId = > (&(objectClass=inetOrgPerson)(|(uid={uid})(uid={samAccountName}))) > > and it works perfectly in every case !!! \ (^ o ^) / > > thanks a lot !!! > > > > > > 2011/12/20 Sébastien Bahloul <[email protected]> > >> Hi Marham, >> >> >> That's the way it is but it need to be configured in the right way : when >> cleaning, LSC go through all the entries in the target directory and look >> for data in the source. In your sample the filterId for the source if only >> looking for entries through the uid={uid} filter, but when the LSC tries to >> launch this filter with the destination pivot attributes, it won't get >> anything because your target pivot attribute should be the samAccountName. >> So you need to fix : >> - lsc.tasks.ADuser.dstService.pivotAttrs= samAccountName >> - lsc.tasks.ADuser.srcService.filterId = >> (&(objectClass=inetOrgPerson)(|(uid={uid})(uid={cn}))) >> >> This is not a good way to handle it, but this is the only way supported >> by the 1.2 version. If you move on the 2.0 you will find a filterClean >> value which allows to specify a filter for the source when cleaning the >> destination (the exact use case you are in) >> >> Regards, >> -- >> Sebastien BAHLOUL >> IAM / Security specialist >> Ldap Synchronization Connector : http://lsc-project.org >> Blog : http://sbahloul.wordpress.com/ >> >> >> >> 2011/12/19 markham extra <[email protected]> >> >>> Hi, >>> i have a last little question. >>> >>> clean option remove all users ( including synchronised user) ,that's >>> normal ? >>> >>> i just want to remove users who exists in only destination repository, >>> that's possible ? >>> >>> thanks >>> >>> my config : >>> >>> lsc.tasks.ADuser.srcService.filterAll = >>> (&(uid=*)(objectClass=inetOrgPerson)) >>> lsc.tasks.ADuser.srcService.pivotAttrs = uid >>> lsc.tasks.ADuser.srcService.filterId = >>> (&(objectClass=inetOrgPerson)(uid={uid})) >>> lsc.tasks.ADuser.srcService.attrs = uid cn sn givenName mail displayName >>> >>> lsc.tasks.ADuser.dstService = org.lsc.jndi.SimpleJndiDstService >>> lsc.tasks.ADuser.dstService.baseDn = OU=LSC >>> lsc.tasks.ADuser.dstService.filterAll >>> =(&(sAMAccountName=*)(objectClass=user)) >>> lsc.tasks.ADuser.dstService.pivotAttrs= uid >>> lsc.tasks.ADuser.dstService.filterId >>> =(&(objectClass=user)(sAMAccountName={uid})) >>> lsc.tasks.ADuser.dstService.attrs = cn sn objectClass sAMAccountName >>> mail userPrincipalName displayName givenName >>> >>> >>> lsc.tasks.ADuser.bean = org.lsc.beans.SimpleBean >>> lsc.tasks.ADuser.dn = "CN=" + srcBean.getAttributeValueById("uid") + >>> ",OU=LSC" //avoid namesake >>> >>> lsc.syncoptions.ADuser = >>> org.lsc.beans.syncoptions.PropertiesBasedSyncOptions >>> lsc.syncoptions.ADuser.default.action = F >>> lsc.syncoptions.ADuser.default.delimiter = ; >>> lsc.syncoptions.ADuser.objectClass.create_value = >>> "top";"user";"person";"organizationalPerson" >>> lsc.syncoptions.ADuser.cn.force_value >>> =srcBean.getAttributeFirstValueById("uid") //avoid namesake >>> lsc.syncoptions.ADuser.sAMAccountName.create_value = >>> srcBean.getAttributeFirstValueById("uid") >>> lsc.syncoptions.ADuser.userPrincipalName.create_value = >>> srcBean.getAttributeValueById("uid") + "@in.monlan-yeah.fr" >>> >>> _______________________________________________________________ >>> Ldap Synchronization Connector (LSC) - http://lsc-project.org >>> >>> lsc-users mailing list >>> [email protected] >>> http://lists.lsc-project.org/listinfo/lsc-users >>> >>> >> >
_______________________________________________________________ Ldap Synchronization Connector (LSC) - http://lsc-project.org lsc-users mailing list [email protected] http://lists.lsc-project.org/listinfo/lsc-users
