RE: LDAP and AD sync

I don't have anything done for that in particular.

However, but for uidnumber I use a object in AD named CN=nextUIDNumber where I store the next uid in the description attribute. Rather than troll through AD and LDAP I just get/set that for the uidnumber attribute.

> -----Original Message-----
> From: Prashanth Sundaram [mailto:[email protected]]
> Sent: Thursday, December 10, 2009 4:59 PM
> To: [email protected]
> Subject: LDAP and AD sync
> 
>    Folks,
> 
> I am a n00b to perl scripting and need help to start building my own. I
> am
> currently working on a project where the LDAP(389-ds) and Active
> Directory
> are always in sync.  I have a very minimal set of attributes and
> conditions
> to keep them in sync.
> 
> Can anyone share their code, so that I can build around it? Here¹s my
> requirement:
> * Sync New users from AD to LDAP with attributes: sAMAccountName, sn,
> givenName, description, userAccountControl(disable/enable),
> * Delete LDAP accounts which are not present in AD and vice versa.
> * Generate the next available uidnumber by parsing thru ldap, so new
> users
> can be created
> * Check memberOf for 2 groups and if true add them to corresponding
> groups
> in LDAP
> 
> If you have any of these modules written already, that would be great
> help.
> I am digging through the archive looking for related code.
> 
> Thanks,
> Prashanth