Re: Windows Active Directory sync Help!

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



kiran madala wrote:
May be i will just try to write a script to store the sync values from Fedora Where can I find the documentation as to how the fedora performs the sync and where does it store? I mean development wise

There are a number of ways to do it, depending on what you are actually trying to do.

If you just need to pull changes from AD, one direction only, you could use the AD DirSync control. This is essentially what Fedora DS uses to pull changes from AD. I don't know if there are any *nix clients with built-in DirSync support, but you could create your own with Net::LDAP and the ASN.1 creator/parser and BER codec.

There are a number of ways to get changes from Fedora DS.
1) ldapsearch ... (modifyTimestamp>=somevalue)
2) enable audit logging then parse the audit log file
3) enable the Retro changelog and search cn=changelog

These can be used with or without persistent search provided by the mozldap ldapsearch command line tool.
----------------------------------------
Date: Thu, 10 Jan 2008 11:48:00 -0700
From: rmeggins@xxxxxxxxxx
To: fedora-directory-users@xxxxxxxxxx
Subject: Re:  Windows Active Directory sync Help!

kiran madala wrote:
But isn't it how the fedora ds does the AD sync?. I mean can I just write the script to connect to AD directly and do ldapsearch for updates?
Yes. The thing is that Fedora DS will not automatically send changes to a database. You'd have to write a plugin for that. It's much simpler to just script it - most scripting languages have ODBC/SQL support as well as LDAP support.
Alternatively can I do a script to search for the user against his/her group from the updates obtained by Fedora-ds from AD?
I'm not sure what you mean by "against his/her group".
IF so what are the docs and packages i should be looking at?

Thanks in advance
----------------------------------------
Date: Thu, 10 Jan 2008 10:40:19 -0700
From: rmeggins@xxxxxxxxxx
To: fedora-directory-users@xxxxxxxxxx
Subject: Re:  Windows Active Directory sync Help!

kiran madala wrote:
Thank you the sync works fine. My actual task is to store the AD users and groups in our company database through the fedora-ds. I was wondering if this is possible,

Like  AD-->FDS-->Own database

IS this a possibility?. If it is then how would I do it?
The usual way to do this is to write a script to use ldapsearch to pull changes from Fedora DS and write them to your database.
_________________________________________________________________
Introducing the City @ Live! Take a tour!
http://getyourliveid.ca/?icid=LIVEIDENCA006

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users

_________________________________________________________________
Exercise your brain! Try Flexicon!
http://puzzles.sympatico.msn.ca/chicktionary/index.html?icid=htmlsig

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users

<<attachment: smime.p7s>>

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Index of Archives]     [Fedora Directory Users]     [Fedora Directory Devel]     [Fedora Announce]     [Fedora Legacy Announce]     [Kernel]     [Fedora Legacy]     [Share Photos]     [Fedora Desktop]     [PAM]     [Red Hat Watch]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite News]

  Powered by Linux