Active Directory Script to import users to Zimbra

[tiger2000]

in most LDAP server or client query(via ldapsearch), it will limit the maximum returned results to 20000, may i learn from you that if this script has such limit ?

Thanks.

[Guest]

have a look at

Nordic Edge Knowledge Base :: NSD1122 How to change the LDAP search limit limitation of 1000 objects in AD LDS

What the Maximum Limit is, I don't know....

But you could break the script up to look at each OU in turn....

[borngunners]

How do you run this script in zimbra?

[Guest]

You cannot run this from within Zimbra. This is for any Linux (Redhat etc)

[borngunners]

Well, I was refering to my ubuntu box as my zimbra server

[dgamez]

Just put the script on any directory of the server filesystem, set the owner to zimbra and run it as zimbra user. For example:

su - root
chown root:zimbra /opt/zimbra/zsync_ad.sh
chmod 750 /opt/zimbra/zsync_ad.sh
su - zimbra
/opt/zimbra/zsync_ad.sh

Then, you can schedule it with cron.

[dgamez]

Que tal Eduardo, tu script es la CAÑA!!

Regarding to your comment:

"Maybe to simplify the script should create 2 output files, one with just the email, to make the diff, and other one with the attributes, which can be grep-ed on real time just before zmprov command.

Hey! This mod sounds quite interesting, as it will make a powerful script.

I will also add a previous modification I made in a recent zimbra installation so that the script checks the availability of both ldap servers to make sure they're online."

Did you success with both issues ?

Saludos!

[khiloc]

please could somebody help me?
your script can help me out creating account directly from AD. But is it possible to automatically get aliases (in zimbra) filled in with "email address" from AD ldap?

in fact in my AD actually usernames are 4 char. four@domain.tld
but my actual mail server (courier imap under centos) usernames are n.surname@domain.tld. my AD is filled up with email address..

so i want to migrate to zimbra OSS. (in test progress)
bulk create user from AD so user will have same password to acces AD and zimbra... but
want that they are still reachable with their old mail address so need to fill zimbra aliase automatically with AD email address field.

Is ist possible? please can some one help modify the scrip in that way?

[Guest]

Originally Posted by khiloc

please could somebody help me?
your script can help me out creating account directly from AD. But is it possible to automatically get aliases (in zimbra) filled in with "email address" from AD ldap?

Yep

See my script I used AD LDAP to create all aliases....

[ElMoRsA]

Originally Posted by sgros

Maybe someone could find this useful. I wrote a python script to do that, but instead of deleting account I put it into closed state in order to be able to perform archival steps prior to removal but also to protect account from bugs that could cause it to be removed (loosing all the mails) while in fact it is still active.

In the course of this, I also wrote Python class to handle Zimbra administration connections that wraps SOAP messages. It's not finished as I don't have time now, but if anyone is interested the code can be found here:

Stjepan Groš - Homepage

S

I've checked your web and there is only the class used for Zimbra Admin, but not the script you refer on you post. Would it be possible for you to share it with us ?

Regards,