The document discusses LDAP Synchronization Connector (LSC), an open source tool for automatically synchronizing identity data across different directory and database systems. It provides an overview of LSC's goals, architecture, features and capabilities for synchronizing user accounts and attributes between heterogeneous systems in a standardized way. Examples are given of configuring LSC to synchronize a MySQL user table to an OpenLDAP directory.

1. 12/04/2010 Jonathan Clarke [email_address]

3. Identity management

5. OpenLDAP Team

7. Consulting: identity management, IT services

9. Central authentication, identity management, …

11. « We use Active Directory for our desktops and we need users' identities there too »

12. « XYZ software only uses a database »

14. Name changes (marriage), transfers...

15. Employees leaving Jim just got fired. Boss asks you to disable his account. Account S , that is. You do it... All done! But what about the account on the company blog? ARGH! Too late. What now!? FIRE THE SYSADMIN!!!?

19. Different data models?

20. Using standards: LDAP, SQL, etc...?

22. Open Source project

23. BSD licence

24. Written in Java

25. 4 years in the making

26. 2 years ago LSC-project.org created

29. Standard LDAPv3 operations

34. Powerful transformations (correctness is important)

36. Easy to setup

39. More secure and better tested

44. Delete: Delete entries from destination not in source

45. Update: Compare and set specific details

48. Search for the destination object with pivot

49. Build up desired destination object by applying transformations to source object

50. If the destination object exists, calculate modifications

51. Apply: create or modify

54. If the source object doesn't exists, delete from destination

55. Apply: delete

57. Population: Which users? Which pivot ?

58. Information: Attributes? Transformations?

61. URL, username, password

62. Simple SQL request SELECT id, first_name AS givenName, last_name AS sn, start_date AS startDate FROM users

66. DN generation lsc.tasks = MyTask lsc.tasks.MyTask.type = db2ldap lsc.tasks.MyTask.dstService.baseDn = ou=People lsc.tasks.MyTask.dstService.pivotAttrs = uid lsc.tasks.MyTask.dstService.filterAll = (uid=*) lsc.tasks.MyTask.dstService.attrs = uid sn cn givenName userPassword lsc.tasks.MyTask.dstService.filterId = (uid={uid}) lsc.tasks.MyTask.dn = "uid=" + srcBean.getAttributeValueById("uid") + "ou=People"

70. http://lsc-project.org/wiki/documentation/1.2/sample

73. Simple LDAP bind test

77. Only update the password if it's changed (p erform a LDAP bind operation to check on the fly)

78. Delete an account after 60 days of inactivity

80. KEEP: leave the destination value as-is

81. DEFAULT: value to use if the destination is empty

83. Force phone numbers if we're authoritative for them

87. OpenDS

88. Sun DSEE

89. Microsoft Active Directory

93. DirSync for Microsoft AD

95. Anything else …

97. Reference documentation

100. Bugtracker, SVN repository …

102. Thanks for your attention! Any questions? Jonathan Clarke [email_address]