Hello,

I try to synchronize my openldap with my ad for posixgroup and i still
have troubles.

I would like to know if there is a way to see what is exactly extract
from openldap in an external file ?

I put here , if needed a part of my lsc.xml file:

        <name>group</name>
            <bean>org.lsc.beans.SimpleBean</bean>
            <ldapSourceService>
                <name>openldap-srce-service</name>
                <connection reference="ldap-src-conn" />
                <baseDn>ou=posixgroups,dc=idiap,dc=ch</baseDn>
                <pivotAttributes>
                    <string>cn</string>
                </pivotAttributes>
                                <fetchedAttributes>
                                        <string>cn</string>
                                        <string>memberUID</string>
                                        <string>gidNumber</string>
                                        <string>description</string>
                                </fetchedAttributes>
                       
<getAllFilter><![CDATA[(objectClass=posixgroup)]]></getAllFilter>
                       
<getOneFilter><![CDATA[(&(objectClass=posixgroup)(cn={cn}))]]></getOneFilter>
            </ldapSourceService>
            <ldapDestinationService>
                <name>ad-dest-service</name>
                <connection reference="ldap-dst-conn" />
                <baseDn>OU=groups,OU=LDAP,DC=ad,DC=idiap,DC=ch</baseDn>
                <pivotAttributes>
                    <string>cn</string>
                </pivotAttributes>
                <fetchedAttributes>
                    <string>cn</string>
                    <string>member</string>
                    <string>objectClass</string>
                    <string>name</string>
                                        <string>gidNumber</string>
                                        <string>description</string>
                </fetchedAttributes>
                <getAllFilter><![CDATA[(objectClass=group)]]></getAllFilter>
               
<getOneFilter><![CDATA[(&(objectClass=group)(cn={cn}))]]></getOneFilter>
            </ldapDestinationService>
           
<!--    ###########################################
    # Syncoptions configuration for Task group#
    ###########################################            -->
           
            <propertiesBasedSyncOptions>
                <mainIdentifier>"CN=" +
srcBean.getDatasetFirstValueById("cn") +
",OU=groups,OU=LDAP,DC=ad,DC=idiap,DC=ch"</mainIdentifier>
                                <defaultDelimiter>$</defaultDelimiter>
                <defaultPolicy>FORCE</defaultPolicy>
                <dataset>
                    <name>name</name>
                                        <policy>KEEP</policy>
                                        <createValues>
                                       
<string>js:srcBean.getDatasetFirstValueById("cn")</string>
                                        </createValues>
                </dataset>
                <dataset>
                    <name>description</name>
                                        <policy>KEEP</policy>
                                        <createValues>
                                       
<string>js:srcBean.getDatasetFirstValueById("description")</string>
                                        </createValues>
                </dataset>
                <dataset>
                    <name>gidNumber</name>
                                        <policy>KEEP</policy>
                                        <createValues>
                                       
<string>js:srcBean.getDatasetFirstValueById("gidNumber")</string>
                                        </createValues>
                </dataset>
                <dataset>
                    <name>objectClass</name>
                    <policy>FORCE</policy>
                    <forceValues>
                                        <string>"top"</string>
                                        <string>"group"</string>
                                        </forceValues>
                                        <delimiter>;</delimiter>
                </dataset>
<!--
                <dataset>
                    <name>member</name>
                    <policy>FORCE</policy>
                    <forceValues>
                    <string><![CDATA[js:
                    var membersSrcDn =
srcBean.getAttributeValuesById("memberUid").toArray();
                    var memberUidValues = [];   
                    for  (var i=0; i<membersSrcDn.length; i++)
                    {
                        var membersSrcDn = "uid=" + membersSrcDn[i]
+",OU=users,DC=idiap,DC=ch";
                        java.lang.System.out.println("membersSrcDn: " +
membersSrcDn);
                        var agriCN = "";
                        try {
                            agriCN = srcLdap.attribute(membersSrcDn[i],
"cn").get(0);
                            } catch (e) {
                            continue;
                                }
                        var destMembersDn =
"CN="+agriCN+",OU=users,OU=LDAP,DC=ad,DC=idiap,DC=ch";
                        java.lang.System.out.println("destMembersDn : "
+ destMembersDn);
                            memberUidValues.push(destMembersDn);
                    }
                    memberUidValues
                    ]]>
                    </string>
                    </forceValues>
                </dataset>
-->
            </propertiesBasedSyncOptions>

Thanks for your help

LMP




_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-users

Reply via email to