I need to sync only users from "RET_CEITE-Infra" and "RET-CEITE-Atendimento" groups. The sync of the mentioned groups is working properly. How I can filter the sync? (All users of these groups have the mail attribute populated)
I attached my lsc.xml. Carefully , [image: UNISANTOS] James Thiago Pereira DTI - Analista de Infraestrutura de TI Tel.: (13) 3205-5555, ramal 1348 [email protected] Universidade Católica de Santos www.unisantos.br
<?xml version="1.0" ?> <lsc xmlns="http://lsc-project.org/XSD/lsc-core-2.1.xsd"; revision="0"> <connections> <ldapConnection> <name>dst-ldap</name> <url>ldap://127.0.0.1:389/dc=adunix,dc=unisantos,dc=br</url> <username>cn=Admin,dc=adunix,dc=unisantos,dc=br</username> <password>Teste123!</password> <authentication>SIMPLE</authentication> <referral>IGNORE</referral> <derefAliases>NEVER</derefAliases> <version>VERSION_3</version> <pageSize>15000</pageSize> <factory>com.sun.jndi.ldap.LdapCtxFactory</factory> <tlsActivated>false</tlsActivated> </ldapConnection> <ldapConnection> <name>src-ad</name> <url>ldap://adserver.unisantos.br:389/OU=ADSERVER,dc=adserver,dc=unisantos,dc=br</url> <username>cn=dhcpadmin,ou=sistemas,ou=ADSERVER,dc=adserver,dc=unisantos,dc=br</username> <password>f4BS8XB43</password> <authentication>SIMPLE</authentication> <pageSize>15000</pageSize> </ldapConnection> </connections> <tasks> <task> <name>MySyncTask</name> <bean>org.lsc.beans.SimpleBean</bean> <ldapSourceService> <name>MySyncTask-src</name> <connection reference="src-ad" /> <baseDn>ou=ADSERVER,dc=adserver,dc=unisantos,dc=br</baseDn> <pivotAttributes> <string>sAMAccountName</string> </pivotAttributes> <fetchedAttributes> <string>cn</string> <string>sn</string> <string>givenName</string> <string>mail</string> <string>sAMAccountName</string> <string>userPrincipalName</string> <string>objectClass</string> </fetchedAttributes> <getAllFilter>(objectClass=user)</getAllFilter> <getOneFilter>(&(sAMAccountName={sAMAccountName})(objectClass=user))</getOneFilter> <cleanFilter>(&(userPrincipalName={userPrincipalName})(objectClass=user))</cleanFilter> <interval>6</interval> </ldapSourceService> <ldapDestinationService> <name>MySyncTask-dst</name> <connection reference="dst-ldap" /> <baseDn>dc=WebminUsers,dc=adunix,dc=unisantos,dc=br</baseDn> <pivotAttributes> <string>mail</string> </pivotAttributes> <fetchedAttributes> <string>cn</string> <string>sn</string> <string>objectClass</string> <string>givenName</string> <string>mail</string> <string>uid</string> </fetchedAttributes> <getAllFilter>(objectClass=inetOrgPerson)</getAllFilter> <getOneFilter>(&(objectClass=inetOrgPerson)(mail={mail}))</getOneFilter> </ldapDestinationService> <propertiesBasedSyncOptions> <mainIdentifier>"mail=" + srcBean.getDatasetValuesById("mail") + ",dc=WebminUsers,dc=adunix,dc=unisantos,dc=br"</mainIdentifier> <defaultDelimiter>;</defaultDelimiter> <defaultPolicy>FORCE</defaultPolicy> <dataset> <name>objectClass</name> <policy>FORCE</policy> <forceValues> <string>"inetOrgPerson"</string> <string>"organizationalPerson"</string> <string>"person"</string> <string>"top"</string> </forceValues> <delimiter>,</delimiter> </dataset> <dataset> <name>uid</name> <policy>FORCE</policy> <forceValues> <string>srcBean.getDatasetFirstValueById("sAMAccountName")</string> </forceValues> </dataset> <dataset> <name>default</name> <policy>FORCE</policy> </dataset> </propertiesBasedSyncOptions> </task> <task> <name>GroupSyncTask</name> <bean>org.lsc.beans.SimpleBean</bean> <ldapSourceService> <name>GroupSyncTask-src</name> <connection reference="src-ad" /> <baseDn>ou=ADSERVER,dc=adserver,dc=unisantos,dc=br</baseDn> <pivotAttributes> <string>cn</string> </pivotAttributes> <fetchedAttributes> <string>cn</string> <string>member</string> <string>objectClass</string> </fetchedAttributes> <getAllFilter>(&(objectClass=group)(member=*)(|(cn=RET_CEITE-Infra)(cn=RET_CEITE-Atendimento)))</getAllFilter> <getOneFilter>(&(objectClass=group)(cn={cn}))</getOneFilter> <cleanFilter>(&(objectClass=group)(cn={cn}))</cleanFilter> <interval>100</interval> </ldapSourceService> <ldapDestinationService> <name>GroupSyncTask-dst</name> <connection reference="dst-ldap"/> <baseDn>dc=WebminGroups,DC=adunix,DC=unisantos,DC=br</baseDn> <pivotAttributes> <string>cn</string> </pivotAttributes> <fetchedAttributes> <string>cn</string> <string>member</string> <string>objectClass</string> <string>gidNumber</string> </fetchedAttributes> <getAllFilter>((objectClass=groupofNames))</getAllFilter> <getOneFilter>(&(objectClass=posixGroup)(cn={cn}))</getOneFilter> </ldapDestinationService> <propertiesBasedSyncOptions> <mainIdentifier>"cn=" + srcBean.getDatasetValuesById("cn")+",dc=WebminGroups,dc=adunix,dc=unisantos,dc=br"</mainIdentifier> <defaultDelimiter>;</defaultDelimiter> <defaultPolicy>FORCE</defaultPolicy> <dataset> <name>objectClass</name> <policy>FORCE</policy> <forceValues> <string>"groupOfNames"</string> <string>"top"</string> </forceValues> <delimiter>$</delimiter> </dataset> <dataset> <name>default</name> <policy>FORCE</policy> </dataset> </propertiesBasedSyncOptions> </task> </tasks> </lsc>
_______________________________________________________________ Ldap Synchronization Connector (LSC) - http://lsc-project.org lsc-users mailing list [email protected] http://lists.lsc-project.org/listinfo/lsc-users
