Event based LDAP source serviceΒΆ

This source service uses LDAP vendors capabilities or a time based pulling system to look for updates inside a directory.

This LSC plugin enables event-based updates handling upon supported directories based on LDAP Persistent search control and LDAP Content Synchronization Operation.

It supports :

  • through LDAP Persistent Search Control :

    • Netscape Directory Server,

    • Sun Directory Server (native and Java edition),

    • Oracle Directory server,

    • OpenDS and OpenDJ

  • through LDAP Content Synchronization Control :

    • OpenLDAP 2.4+

    • Apache DS (to be fully checked)

  • through proprietary Microsoft control : Active Directory

Important

The support for Active Directory is limited. Indeed, AD only accepts persistent search with the filter (objectClass=*). See the LDAP Server Notification control for more information.

It has exactly the same parameters as a LDAP source service requires, plus the <serverType> element, as shown below:

<lsc>
  <tasks>
    <task>
      <asyncLdapSourceService>
        <name>openldap-source-service</name>
        <connection reference="ldap-src-conn" />
        <baseDn>ou=People,dc=lsc-project,dc=org</baseDn>
        <pivotAttributes>
          <string>mail</string>
        </pivotAttributes>
        <fetchedAttributes>
          <string>description</string>
          <string>cn</string>
          <string>sn</string>
          <string>userPassword</string>
          <string>objectClass</string>
          <string>uid</string>
          <string>mail</string>
        </fetchedAttributes>
        <getAllFilter>
          (objectClass=inetorgperson)
        </getAllFilter>
        <getOneFilter>
          (&amp;(objectClass=inetorgperson)(mail={mail}))
        </getOneFilter>
        <synchronizingAllWhenStarting>true</synchronizingAllWhenStarting>
        <serverType>OpenLDAP</serverType>
      </asyncLdapSourceService>
    </task>
  </tasks>
</lsc>

The generic settings are described there: LDAP source service

The specific settings are:

  • synchronizingAllWhenStarting: set to false to bypass a full synchronization on start (default: true)

  • serverType: one the following values:

    • OpenLDAP

    • ApacheDS

    • OpenDS

    • OpenDJ

    • OracleDS

    • SunDS

    • NetscapeDS

    • ActiveDirectory

    • NovellEDirectory