Groups lsc.xml

<?xml version="1.0" encoding="utf-8"?>
<lsc xmlns="http://lsc-project.org/XSD/lsc-core-2.0.xsd" revision="0">
  <connections>
    <ldapConnection>
      <name>ldap-src-conn</name>
      <url>ldap://opendj.example.org:389/dc=example,dc=org</url>
      <username>cn=Directory Manager</username>
      <password>********</password>
      <authentication>SIMPLE</authentication>
      <referral>IGNORE</referral>
      <derefAliases>NEVER</derefAliases>
      <version>VERSION_3</version>
      <pageSize>1000</pageSize>
      <factory>com.sun.jndi.ldap.LdapCtxFactory</factory>
    </ldapConnection>
    <ldapConnection>
      <name>ldap-dst-conn</name>
      <url>ldap://dc1.example.net:389/DC=example,DC=net</url>
      <username>CN=lscsync,CN=Users,DC=example,DC=net</username>
      <password>********</password>
      <authentication>SIMPLE</authentication>
      <referral>IGNORE</referral>
      <derefAliases>NEVER</derefAliases>
      <version>VERSION_3</version>
      <pageSize>-1</pageSize>
      <factory>com.sun.jndi.ldap.LdapCtxFactory</factory>
    </ldapConnection>
  </connections>
  <audits />
  <tasks>
    <!-- begin group sync task -->
    <task>
      <name>syncGroups</name>
      <bean>org.lsc.beans.SimpleBean</bean>
      <ldapSourceService>
        <name>ldap-src-service-g</name>
        <connection reference="ldap-src-conn" />
        <baseDn>ou=Groups,dc=example,dc=org</baseDn>
        <pivotAttributes>
          <string>cn</string>
        </pivotAttributes>
        <fetchedAttributes>
          <string>cn</string>
          <string>description</string>
          <string>member</string>
          <string>memberUid</string>
          <string>gidNumber</string>
        </fetchedAttributes>
        <getAllFilter>(&amp;(objectClass=groupofnames)(cn=safety))</getAllFilter>
        <getOneFilter>(&amp;(objectClass=groupofnames)(cn={cn}))</getOneFilter>
      </ldapSourceService>
      <ldapDestinationService>
        <name>ldap-dst-service-g</name>
        <connection reference="ldap-dst-conn" />
        <baseDn>CN=Users,DC=example,DC=net</baseDn>
        <pivotAttributes>
          <string>cn</string>
        </pivotAttributes>
        <fetchedAttributes>
          <string>cn</string>
          <string>description</string>
          <string>name</string>
          <string>samAccountName</string>
          <string>member</string>
          <string>objectClass</string>
        </fetchedAttributes>
        <getAllFilter>(&amp;(objectClass=group)(cn=safety))</getAllFilter>
        <getOneFilter>(&amp;(objectClass=group)(cn={cn}))</getOneFilter>
      </ldapDestinationService>
      <propertiesBasedSyncOptions>
        <mainIdentifier>"CN=" + srcBean.getDatasetFirstValueById("cn") + ",CN=Users,DC=example,DC=net"</mainIdentifier>
        <defaultDelimiter>$</defaultDelimiter>
        <defaultPolicy>FORCE</defaultPolicy>
        <dataset>
          <name>objectClass</name>
          <policy>FORCE</policy>
          <forceValues>
            <string>"top"</string>
            <string>"group"</string>
          </forceValues>
        </dataset>
        <dataset>
          <name>name</name>
          <policy>FORCE</policy>
          <forceValues>
            <string>srcBean.getDatasetFirstValueById("cn")</string>
          </forceValues>
        </dataset>
        <dataset>
          <name>samAccountName</name>
          <policy>FORCE</policy>
          <forceValues>
            <string>srcBean.getDatasetFirstValueById("cn")</string>
          </forceValues>
        </dataset>
        <dataset>
          <name>msSFU30Name</name>
          <policy>FORCE</policy>
          <forceValues>
            <string>srcBean.getDatasetFirstValueById("cn")</string>
          </forceValues>
        </dataset>
        <dataset>
          <name>msSFU30NisDomain</name>
          <policy>FORCE</policy>
          <forceValues>
            <string>"example"</string>
          </forceValues>
        </dataset>
        <dataset>
          <name>member</name>
          <policy>FORCE</policy>
          <forceValues>
            <string>
              <![CDATA[js:
var umembers = srcBean.getAttributeValuesById("memberUid").toArray() ;
for (var i=0; i<umembers.length; i++ ) {
  try {
    umembers[i] = ldap.attribute(ldap.list( "CN=Users", "(sAMAccountName=" + umembers[i] + ")" ).get(0), 'distinguishedname').get(0);
    } catch (e) {
    umembers[i]=null;
  }
}
var members = new Array();
var j=0;
for (var i=0; i<umembers.length; i++) {
  if (umembers[i]!==null) {
    members[j++]=umembers[i];
  }
}
members
              ]]>
            </string>
          </forceValues>
        </dataset>
      </propertiesBasedSyncOptions>
    </task>
  </tasks>
  <security></security>
</lsc>