Re: [lsc-users] lsc: OpenLdap to AD

Mon, 19 Jun 2017 07:49:56 -0700 

I cant find error.

<?xml version="1.0" ?>
<lsc xmlns="http://lsc-project.org/XSD/lsc-core-2.1.xsd"; revision="0">
<connections>
    <ldapConnection>
      <name>AD</name>
      <url>ldap://********:389/cn=Users,dc=INTERNA,dc=dc,dc=uba,dc=ar</url>
      <username>INTERNA\administrator</username>
      <password>********</password>
      <authentication>SIMPLE</authentication>
      <referral>IGNORE</referral>
      <derefAliases>NEVER</derefAliases>
      <version>VERSION_3</version>
      <pageSize>-1</pageSize>
      <factory>com.sun.jndi.ldap.LdapCtxFactory</factory>
      <tlsActivated>false</tlsActivated>
    </ldapConnection>

    <ldapConnection>
       <name>openldap</name>
       <url>ldap://******:389/dc=People,dc=dc,dc=uba,dc=ar </url>
       <username>cn=admin,dc=dc,dc=uba,dc=ar</username>
       <password>*******</password>
       <authentication>SIMPLE</authentication>
       <referral>IGNORE</referral>
       <derefAliases>NEVER</derefAliases>
       <version>VERSION_3</version>
       <pageSize>-1</pageSize>
       <factory>com.sun.jndi.ldap.LdapCtxFactory</factory>
       <tlsActivated>false</tlsActivated>
    </ldapConnection>
</connections>

<tasks>
    <task>
      <name>adUser</name>
      <ldapSourceService>
        <name>openldapsourceservice</name>
        <connection reference="openldap" />
        <baseDn>ou=People,dc=dc,dc=uba,dc=ar</baseDn>
        <pivotAttributes>
          <string>uid</string>
        </pivotAttributes>
        <fetchedAttributes>
          <string>cn</string>
          <string>description</string>
          <string>givenName</string>
          <string>mail</string>
          <string>sn</string>
          <string>uid</string>
          <string>userpassword</string>
        </fetchedAttributes>
        <getAllFilter><![CDATA[(objectClass=inetOrgPerson)]]></getAllFilter>

<getOneFilter><![CDATA[(&amp;(objectClass=inetOrgPerson)(uid={uid}))]]></getOneFilter>

<cleanFilter><![CDATA[(&amp;(objectClass=inetOrgPerson)(uid={sAMAccountName}))]]></cleanFilter>
      </ldapSourceService>

      <ldapDestinationService>
        <name>ad-dst-service</name>
        <connection reference="AD" />
        <baseDn>cn=Users,dc=INTERNA,dc=dc,dc=uba,dc=ar</baseDn>
        <pivotAttributes>
          <string>sAMAccountName</string>
        </pivotAttributes>
        <fetchedAttributes>
          <string>cn</string>
          <string>description</string>
          <string>givenName</string>
          <string>mail</string>
          <string>objectclass</string>
          <string>pwdLastSet</string>
          <string>sAMAccountName</string>
          <string>sn</string>
          <string>unicodePwd</string>
          <string>userAccountControl</string>
          <string>userPrincipalName</string>
        </fetchedAttributes>
        <getAllFilter><![CDATA[(objectClass=user)]]></getAllFilter>

<getOneFilter><![CDATA[(&amp;(objectClass=user)(sAMAccountName={uid}))]]></getOneFilter>
      </ldapDestinationService>
    </task>

<task>
   <propertiesBasedSyncOptions>
    <mainIdentifier>"cn=" + srcBean.getDatasetFirstValueId("cn") +
",cn=Users,dc=INTERNA,dc=dc,dc=uba,dc=ar"</mainIdentifier>
    <defaultDelimiter>;</defaultDelimiter>
    <defaultPolicy>FORCE</defaultPolicy>
    <conditions>
      <create>true</create>
      <update>true</update>
      <delete>true</delete>
      <changeId>true</changeId>
    </conditions>
    <dataset>
      <name>objectclass</name>
      <policy>KEEP</policy>
      <createValues>
        <string>"user"</string>
        <string>"organizationalPerson"</string>
        <string>"person"</string>
        <string>"top"</string>
      </createValues>
    </dataset>
    <dataset>
     <name>sAMAccountName</name>
     <policy>KEEP</policy>
     <createValues>
      <string>srcBean.getDatasetFirstValueById("uid")</string>
     </createValues>
    </dataset>
    <dataset>
     <!-- userPrincipalName = uid + "@lsc-project.org" -->
     <name>userPrincipalName</name>
     <policy>FORCE</policy>
     <forceValues>
      <string>srcBean.getDatasetFirstValueById("uid") + "@dc.uba.ar
"</string>
     </forceValues>
    </dataset>
    <dataset>
     <name>userAccountControl</name>
     <policy>KEEP</policy>
     <createValues>
      <string>AD.userAccountControlSet( "0",
[AD.UAC_SET_NORMAL_ACCOUNT])</string>
     </createValues>
    </dataset>
    <dataset>
     <!-- pwdLastSet = 0 to force user to change password on next
connection -->
     <name>pwdLastSet</name>
     <policy>KEEP</policy>
     <createValues>
      <string>"0"</string>
     </createValues>
    </dataset>
    <dataset>
      <!-- unicodePwd = "changeit" at creation (requires SSL connection to
AD) -->
     <name>unicodePwd</name>
     <policy>KEEP</policy>
     <createValues>
      <string>AD.getUnicodePwd("changeit")</string>
     </createValues>
    </dataset>
   </propertiesBasedSyncOptions>
  </task>

</tasks>

</lsc>

2017-06-16 7:19 GMT-03:00 Clément OUDOT <[email protected]>
:

>
>
> Le 15/06/2017 à 21:32, Cristian Vazquez a écrit :
>
>> Hi! I try config but it is failed.
>>
>> "Se ha encontrado contenido no válido a parir del elemento 'referral'. Se
>> esperaba uno de "
>>
>>
>>
> Seems your lsc.xml has an invalid syntax. Check around the <referral>
> markup.
>
>
> --
> Clément OUDOT
> Consultant en logiciels libres, Expert infrastructure et sécurité
> Savoir-faire Linux
> 137 boulevard de Magenta - 75010 PARIS
> Blog: http://sflx.ca/coudot
>
> _______________________________________________________________
> Ldap Synchronization Connector (LSC) - http://lsc-project.org
>
> lsc-users mailing list
> [email protected]
> https://lists.lsc-project.org/cgi-bin/mailman/listinfo/lsc-users




-- 
Saludos.
Cristian

_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
[email protected]
https://lists.lsc-project.org/cgi-bin/mailman/listinfo/lsc-users

Reply via email to