Active Directory Script to import users to Zimbra

[tiger2000]

in most LDAP server or client query(via ldapsearch), it will limit the maximum returned results to 20000, may i learn from you that if this script has such limit ?

Thanks.

[Guest]

have a look at

Nordic Edge Knowledge Base :: NSD1122 How to change the LDAP search limit limitation of 1000 objects in AD LDS

What the Maximum Limit is, I don't know....

But you could break the script up to look at each OU in turn....

[borngunners]

How do you run this script in zimbra?

[Guest]

You cannot run this from within Zimbra. This is for any Linux (Redhat etc)

[borngunners]

Well, I was refering to my ubuntu box as my zimbra server

[dgamez]

Just put the script on any directory of the server filesystem, set the owner to zimbra and run it as zimbra user. For example:

su - root
chown root:zimbra /opt/zimbra/zsync_ad.sh
chmod 750 /opt/zimbra/zsync_ad.sh
su - zimbra
/opt/zimbra/zsync_ad.sh

Then, you can schedule it with cron.

[dgamez]

Que tal Eduardo, tu script es la CAÑA!!

Regarding to your comment:

"Maybe to simplify the script should create 2 output files, one with just the email, to make the diff, and other one with the attributes, which can be grep-ed on real time just before zmprov command.

Hey! This mod sounds quite interesting, as it will make a powerful script.

I will also add a previous modification I made in a recent zimbra installation so that the script checks the availability of both ldap servers to make sure they're online."

Did you success with both issues ?

Saludos!

[khiloc]

please could somebody help me?
your script can help me out creating account directly from AD. But is it possible to automatically get aliases (in zimbra) filled in with "email address" from AD ldap?

in fact in my AD actually usernames are 4 char. four@domain.tld
but my actual mail server (courier imap under centos) usernames are n.surname@domain.tld. my AD is filled up with email address..

so i want to migrate to zimbra OSS. (in test progress)
bulk create user from AD so user will have same password to acces AD and zimbra... but
want that they are still reachable with their old mail address so need to fill zimbra aliase automatically with AD email address field.

Is ist possible? please can some one help modify the scrip in that way?

[Guest]

Originally Posted by khiloc

please could somebody help me?
your script can help me out creating account directly from AD. But is it possible to automatically get aliases (in zimbra) filled in with "email address" from AD ldap?

Yep

See my script I used AD LDAP to create all aliases....