Synchronize LDAP with Active Directory Using LSC
•Als ODP, PDF herunterladen•
4 gefällt mir•5,892 views
The document discusses the LSC project which allows synchronizing OpenLDAP directories with Active Directory using an LDAP synchronization connector. It provides an overview of how the LSC engine works by defining synchronization tasks and options to synchronize data between LDAP directories and databases. The LSC project allows bidirectional synchronization of users and other objects between OpenLDAP and Active Directory.
![[object Object]](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Empfohlen
Empfohlen
Weitere ähnliche Inhalte
Was ist angesagt?
Was ist angesagt? (20)
Andere mochten auch
Andere mochten auch (20)
Ähnlich wie Synchronize LDAP with Active Directory Using LSC
Ähnlich wie Synchronize LDAP with Active Directory Using LSC (20)
Mehr von Clément OUDOT
Mehr von Clément OUDOT (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
Synchronize LDAP with Active Directory Using LSC
- 1. Synchronize OpenLDAP with Active Directory The LSC project Clément OUDOT
- 6. Demonstration Table of contents
- 8. Having just Open Source in our information system is dream
- 9. But drive Active Directory from OpenLDAP is now a reality, thanks to LSC project Introduction
- 11. BSD licence
- 12. Java
- 13. LDAP provisioning from databases, flat files and LDAP directories
- 14. Extended functions for Active Directory
- 15. LDAP Query Language (LQL)
- 16. Overview
- 20. CSV files (injected in local HSQLDB)
- 21. LSC engine
- 23. Run maven to get dependencies
- 24. Run the code generation wizard
- 25. Configure your rules in lsc.properties
- 28. Recursive delete
- 31. Extended matching filters src.java.naming.factory.initial = com.sun.jndi.ldap.LdapCtxFactory src.java.naming.ldap.derefAliases = never src.java.naming.ldap.version = 3 src.java.naming.provider.url = ldap://localhost/dc=example,dc=com src.java.naming.referral = ignore src.java.naming.security.authentication = simple src.java.naming.security.principal = cn=admin,dc=example,dc=com src.java.naming.security.credentials = secret Example
- 33. Task type (db2ldap or ldap2ldap)
- 34. Bean for destination (dstBean)
- 35. Object for source (mapped in srcBean)
- 36. DN template
- 39. Filter (All and and Id)
- 40. Attributes
- 41. Pivot attributes
- 42. Definition of a task lsc.tasks = user lsc.tasks.user.type = ldap2ldap lsc.tasks.user.bean = org.lsc.beans.userBean lsc.tasks.user.object = org.lsc.objects.inetOrgPerson lsc.tasks.user.dn = "cn=" + srcBean.getAttributeValueById("cn") + ",ou=users" lsc.tasks.user.srcService = org.lsc.jndi.SimpleJndiSrcService lsc.tasks.user.srcService.attrs = uid cn sn givenName mail o lsc.tasks.user.srcService.baseDn = ou=users lsc.tasks.user.srcService.filterAll = (objectClass=inetOrgPerson) lsc.tasks.user.srcService.filterId = (&(objectClass=inetOrgPerson)(|(uid={samaccountname})(uid={uid}))) lsc.tasks.user.srcService.pivotAttrs = uid lsc.tasks.user.dstService = org.lsc.jndi.SimpleJndiDstService lsc.tasks.user.dstService.attrs = cn sn givenName mail company objectClass sAMAccountName lsc.tasks.user.dstService.baseDn = ou=users lsc.tasks.user.dstService.filterAll = (objectClass=user) lsc.tasks.user.dstService.filterId = (&(objectClass=user)(|(sAMAccountName={uid})(sAMAccountName={samaccountname}))) lsc.tasks.user.dstService.pivotAttrs = sAMAccountName Example
- 44. Value modification type: Create/Default/Force
- 48. Synchronization options lsc.syncoptions.user = org.lsc.beans.syncoptions.PropertiesBasedSyncOptions lsc.syncoptions.user.default.action = F lsc.syncoptions.user.company.force_value = srcBean.getAttributeValueById("o") lsc.syncoptions.user.name.force_value = srcBean.getAttributeValueById("cn") lsc.syncoptions.user.displayName.force_value = srcBean.getAttributeValueById("cn") lsc.syncoptions.user.objectClass.force_value = "top";"user";"person";"organizationalPerson" lsc.syncoptions.user.sAMAccountName.create_value = srcBean.getAttributeValueById("uid") lsc.syncoptions.user.userPrincipalName.create_value = srcBean.getAttributeValueById("uid") + "@example.com" lsc.syncoptions.user.scriptPath.create_value = "demo.bat" Example
- 58. sup(DN, level) lsc.syncoptions.user.givenName.force_value = srcLdap.attribute( srcLdap.list( "ou=services", "uniqueMember=" + srcBean.getDistinguishName() + "" ), 'description').get(0) Example
- 61. OpenLDAP RPM
- 62. LDAP scripts
- 63. Web application for user to change their password (OpenLDAP and Active Directory)
- 65. Thank you for your attention Visit us at our stand 107 - hall 7.2b