257N/ASample 2d - Synchronizing LDAP Groups

257N/A-------------------------------------

257N/ACopyright (c) 2012 ForgeRock AS

257N/AThis work is licensed under a Creative Commons Attribution-

257N/ANonCommercial-NoDerivs 3.0 Unported License. See

6425N/A

6425N/AThis sample is the same as sample 2c except that it focuses on synchronizing

6425N/ALDAP groups.

257N/A

6425N/ATo run this sample, launch OpenIDM with the sample configuration as follows:

257N/A$ /path/to/openidm/startup.sh -p samples/sample2d

6425N/A

257N/Aor follow the documentation in the Install Guide:

6425N/Ahttp://openidm.forgerock.org/doc/install-guide/index.html#more-sample2d

257N/A

257N/AThe sample configuration connects to a local OpenDJ server with the following

6425N/Aparameters:

6425N/A

257N/A"host" : "localhost",

257N/A"port" : 1389,

257N/A"principal" : "cn=Directory Manager",

257N/A"credentials" : "password",

257N/A

257N/AUnlike sample2, this sample sync.json configuration contains three mappings -

257N/Atwo for user objects and one for group objects. The number of attributes mapped

257N/Ais limited.

257N/A

257N/ANew groups are created from LDAP by running a reconciliation against the LDAP

257N/Agroups. Reconciliation synchronizes the cn and dn of the groups as well as the

257N/Adescription and the uniqueMember attribute which contains a list of all the

257N/Amember DNs of this group.