Project

General

Profile

Tâche #33949

Scénario #33917: Étude pour l'utilisation de memberOf pour les groupes eleves/professeurs/administratifs? avec LSC en mode multi-établissement

LSC : ignorer les groupes "eleves" et "professeurs" en mode multi-établissement

Added by Joël Cuissinat about 2 years ago. Updated about 2 years ago.

Status:
Fermé
Priority:
Normal
Assigned To:
Start date:
03/14/2022
Due date:
% Done:

100%

Remaining (hours):
0.0

Description

À ajouter dans les filtres de recherche sur les groupes :
  • <getAllFilter>
  • <getOneFilter>

Associated revisions

Revision 97586d60 (diff)
Added by Joël Cuissinat about 2 years ago

multi-etab : don't synchronize "eleves" and "professeurs" groups

Ref: #33949

History

#1 Updated by Joël Cuissinat about 2 years ago

  • Status changed from Nouveau to En cours

#2 Updated by Joël Cuissinat about 2 years ago

  • Assigned To set to Joël Cuissinat

#3 Updated by Joël Cuissinat about 2 years ago

Tests réalisés avec une VM : aca.scribe-2.8.1-avecimport-multietab

#4 Updated by Joël Cuissinat about 2 years ago

Attention, il n'y a pas de groupe prof-etablissment pour l'établissement "racine" (0000000A), les enseignants créés dans cet établissement risquent de ne pas être inscrits au groupe professeurs !

#5 Updated by Joël Cuissinat about 2 years ago

diff --git a/tmpl/lsc.xml b/tmpl/lsc.xml
index 939b295..f2062bd 100644
--- a/tmpl/lsc.xml
+++ b/tmpl/lsc.xml
@@ -1,6 +1,11 @@
 <?xml version="1.0" ?>
 <lsc xmlns="http://lsc-project.org/XSD/lsc-core-2.1.xsd" revision="0">
 %set %%destdn = 'DC='+',DC='.join(%%ad_domain.split('.'))
+%if %%ead_support_multietab == 'non'
+%set ignoregroups = ''
+%else
+%set ignoregroups = '(!(cn=eleves))(!(cn=professeurs))'
+%end if
   <connections>
     <ldapConnection>
       <name>ldap-src-conn</name>
@@ -398,8 +403,8 @@
           <string>gidNumber</string>
           <string>type</string>
        </fetchedAttributes>
-        <getAllFilter>(&amp;(objectClass=posixGroup)(!(cn=Domain*))(!(cn=PrintOperators)))</getAllFilter>
-        <getOneFilter>(&amp;(objectClass=posixGroup)(!(cn=Domain*))(!(cn=PrintOperators))(cn={cn}))</getOneFilter>
+        <getAllFilter>(&amp;(objectClass=posixGroup)(!(cn=Domain*))(!(cn=PrintOperators))%%{ignoregroups})</getAllFilter>
+        <getOneFilter>(&amp;(objectClass=posixGroup)(!(cn=Domain*))(!(cn=PrintOperators))%%{ignoregroups}(cn={cn}))</getOneFilter>
         <cleanFilter>(&amp;(objectClass=posixGroup)(cn={sAMAccountName}))</cleanFilter>
         <serverType>OpenLDAP</serverType>
       </asyncLdapSourceService>
@@ -420,8 +425,8 @@
           <string>mail</string>
           <string>info</string>
         </fetchedAttributes>
-        <getAllFilter>(&amp;(objectClass=group)(!(isCriticalSystemObject=TRUE))(!(cn=DnsAdmins))(!(cn=DnsUpdateProxy)))</getAllFilter>
-        <getOneFilter>(&amp;(objectClass=group)(!(isCriticalSystemObject=TRUE))(!(cn=DnsAdmins))(!(cn=DnsUpdateProxy))(sAMAccountName={cn}))</getOneFilter>
+        <getAllFilter>(&amp;(objectClass=group)(!(isCriticalSystemObject=TRUE))(!(cn=DnsAdmins))(!(cn=DnsUpdateProxy))%%{ignoregroups})</getAllFilter>
+        <getOneFilter>(&amp;(objectClass=group)(!(isCriticalSystemObject=TRUE))(!(cn=DnsAdmins))(!(cn=DnsUpdateProxy))%%{ignoregroups}(sAMAccountName={cn}))</getOneFilter>
       </ldapDestinationService>
       <propertiesBasedSyncOptions>
 %if %%ead_support_multietab == 'non'
@@ -518,8 +523,8 @@
           <string>cn</string>
           <string>type</string>
        </fetchedAttributes>
-        <getAllFilter>(&amp;(objectClass=posixGroup)(!(type=Etablissement))(!(cn=Domain*))(!(cn=PrintOperators)))</getAllFilter>
-        <getOneFilter>(&amp;(objectClass=posixGroup)(!(type=Etablissement))(!(cn=Domain*))(!(cn=PrintOperators))(cn={cn}))</getOneFilter>
+        <getAllFilter>(&amp;(objectClass=posixGroup)(!(type=Etablissement))(!(cn=Domain*))(!(cn=PrintOperators))%%{ignoregroups})</getAllFilter>
+        <getOneFilter>(&amp;(objectClass=posixGroup)(!(type=Etablissement))(!(cn=Domain*))(!(cn=PrintOperators))%%{ignoregroups}(cn={cn}))</getOneFilter>
         <cleanFilter>(&amp;(objectClass=posixGroup)(cn={sAMAccountName}))</cleanFilter>
         <serverType>OpenLDAP</serverType>
       </asyncLdapSourceService>
@@ -536,8 +541,8 @@
           <string>cn</string>
           <string>info</string>
         </fetchedAttributes>
-        <getAllFilter>(&amp;(objectClass=group)(info=EOLE))</getAllFilter>
-        <getOneFilter>(&amp;(objectClass=group)(!(isCriticalSystemObject=TRUE))(!(cn=DnsAdmins))(!(cn=DnsUpdateProxy))(sAMAccountName={cn}))</getOneFilter>
+        <getAllFilter>(&amp;(objectClass=group)(info=EOLE)%%{ignoregroups})</getAllFilter>
+        <getOneFilter>(&amp;(objectClass=group)(!(isCriticalSystemObject=TRUE))(!(cn=DnsAdmins))(!(cn=DnsUpdateProxy))%%{ignoregroups}(sAMAccountName={cn}))</getOneFilter>
       </ldapDestinationService>
       <propertiesBasedSyncOptions>
 %if %%ead_support_multietab == 'non'

#6 Updated by Joël Cuissinat about 2 years ago

  • Status changed from En cours to Résolu
  • % Done changed from 0 to 100

#7 Updated by Joël Cuissinat about 2 years ago

  • Status changed from Résolu to Fermé
  • Remaining (hours) set to 0.0

Also available in: Atom PDF