lsc.properties

# Adapted from http://lists.lsc-project.org/pipermail/lsc-users/2010-October/000471.html
##############################
# Destination LDAP directory #
##############################
dst.java.naming.provider.url = ldap://dc1.example.net:389/DC=example,DC=net
dst.java.naming.security.authentication = simple
dst.java.naming.security.principal = CN=lscsync,CN=Users,DC=example,DC=net
dst.java.naming.security.credentials = ********
dst.java.naming.referral = ignore
dst.java.naming.ldap.derefAliases = never
dst.java.naming.factory.initial = com.sun.jndi.ldap.LdapCtxFactory
dst.java.naming.ldap.version = 3

#########################
# Source LDAP directory #
#########################
src.java.naming.provider.url = ldap://ldap.example.org:389/dc=example,dc=org
src.java.naming.security.authentication = simple
src.java.naming.security.principal = cn=Directory Manager
src.java.naming.security.credentials = ********
src.java.naming.referral = ignore
src.java.naming.ldap.derefAliases = never
src.java.naming.factory.initial = com.sun.jndi.ldap.LdapCtxFactory
src.java.naming.ldap.version = 3
src.java.naming.ldap.pageSize = 1000

#######################
# Tasks configuration #
#######################
lsc.tasks = ldap2ad_user

####
#### ldap2ad_user : Source
####
lsc.tasks.ldap2ad_user.srcService = org.lsc.jndi.SimpleJndiSrcService
lsc.tasks.ldap2ad_user.srcService.baseDn = ou=People
# lsc.tasks.ldap2ad_user.srcService.filterAll = (&(objectclass=posixAccount)(uid=*))
lsc.tasks.ldap2ad_user.srcService.filterAll = (&(objectclass=posixAccount)(uid=sobrien))
lsc.tasks.ldap2ad_user.srcService.pivotAttrs = uid
lsc.tasks.ldap2ad_user.srcService.filterId = (&(objectClass=posixAccount)(|(uid={uid})(uid={samaccountname})))
lsc.tasks.ldap2ad_user.srcService.attrs = description uid cn sn userPassword givenName displayName mail mailAlternateAddress

####
#### ldap2ad_user : Destination
####
lsc.tasks.ldap2ad_user.dstService = org.lsc.jndi.SimpleJndiDstService
lsc.tasks.ldap2ad_user.dstService.baseDn = CN=Users
lsc.tasks.ldap2ad_user.dstService.filterAll = (&(objectClass=inetOrgPerson)(sAMAccountName=*))
lsc.tasks.ldap2ad_user.dstService.pivotAttrs = samaccountname
lsc.tasks.ldap2ad_user.dstService.filterId = (&(objectClass=inetOrgPerson)(|(sAMAccountName={samaccountname})(sAMAccountName={uid})))
lsc.tasks.ldap2ad_user.dstService.attrs = description name givenName displayName cn sn objectClass sAMAccountName userPrincipalName userAccountControl uid mail proxyAddresses
lsc.tasks.ldap2ad_user.bean = org.lsc.beans.SimpleBean

# escaping commas in the dn does not seem to work:
# lsc.tasks.ldap2ad_user.dn = "CN=" + srcBean.getAttributeValueById("cn").split(",").join("\\\\\\\\,") + ",CN=Users"
# lsc.tasks.ldap2ad_user.dn = "CN=" + srcBean.getAttributeValueById("cn").split(",").join("\\\\2C") + ",CN=Users"

# escaping single-quote?
# lsc.tasks.ldap2ad_user.dn = "CN=" + srcBean.getAttributeValueById("cn").split("'").join("\\\\\\\\\\\\\\\\'") + ",CN=Users"
# lsc.tasks.ldap2ad_user.dn = "CN=" + srcBean.getAttributeValueById("cn").split("'").join("\\\\\\\\'") + ",CN=Users"
# lsc.tasks.ldap2ad_user.dn = "CN=" + srcBean.getAttributeValueById("cn").split("'").join("\\\\27") + ",CN=Users"
lsc.tasks.ldap2ad_user.dn = "CN=" + srcBean.getAttributeValueById("cn") + ",CN=Users"

dn.real_root = DC=example,DC=net

lsc.syncoptions.ldap2ad_user = org.lsc.beans.syncoptions.PropertiesBasedSyncOptions
lsc.syncoptions.ldap2ad_user.default.action = K
lsc.syncoptions.ldap2ad_user.default.delimiter = $
lsc.syncoptions.ldap2ad_user.sn.action = F
# lsc.syncoptions.ldap2ad_user.sn.force_value = srcBean.getAttributeValueById("sn").split("'").join("\27")
lsc.syncoptions.ldap2ad_user.sn.force_value = srcBean.getAttributeValueById("sn")
lsc.syncoptions.ldap2ad_user.objectClass.action = F
lsc.syncoptions.ldap2ad_user.objectClass.create_value = "top"$"person"$"organizationalPerson"$"user"$"inetOrgPerson"$"posixAccount"
lsc.syncoptions.ldap2ad_user.sAMAccountName.create_value = srcBean.getAttributeValueById("uid")
lsc.syncoptions.ldap2ad_user.uid.action = F
lsc.syncoptions.ldap2ad_user.uid.force_value = srcBean.getAttributeValueById("uid")
lsc.syncoptions.ldap2ad_user.userPrincipalName.create_value = srcBean.getAttributeValueById("uid") + "@example.net"
lsc.syncoptions.ldap2ad_user.cn.action = F
# lsc.syncoptions.ldap2ad_user.cn.force_value = srcBean.getAttributeValueById("cn").split("'").join("\27")
lsc.syncoptions.ldap2ad_user.cn.force_value = srcBean.getAttributeValueById("cn")
lsc.syncoptions.ldap2ad_user.givenName.action = F
lsc.syncoptions.ldap2ad_user.givenName.force_value = srcBean.getAttributeValueById("givenName")
lsc.syncoptions.ldap2ad_user.mail.action = F
lsc.syncoptions.ldap2ad_user.mail.force_value = srcBean.getAttributeValueById("mail")
lsc.syncoptions.ldap2ad_user.proxyAddresses.action = F
lsc.syncoptions.ldap2ad_user.proxyAddresses.force_value = srcBean.getAttributeValueById("mailAlternateAddress")
lsc.syncoptions.ldap2ad_user.name.action = F
lsc.syncoptions.ldap2ad_user.name.create_value = srcBean.getAttributeValueById("displayName")
lsc.syncoptions.ldap2ad_user.userAccountControl.force_value = \
    AD.userAccountControlSet( "0", [ AD.UAC_SET_PASSWD_NOTREQD, AD.UAC_SET_NORMAL_ACCOUNT, AD.UAC_UNSET_ACCOUNTDISABLE, AD.UAC_SET_DONT_EXPIRE_PASSWORD, AD.UAC_SET_PASSWD_CANT_CHANGE ])