because there is no update on the LDAP Connector from iTop we need to build a workaround to delete users at night to have a correct group handling from our LDAP.
Our Setup
We are using the LDAP Connector from the iTop Hub to import users from our LDAP to iTop that are member of a certain OU group every 3 hours. If we assign groups in LDAP like Portal-User we use the group P_ITOP_Portal-User. This is working quiet well, but it has 2 bugs that we have faced.
- If a user need to switch the group we assign him to another LDAP-Group that reflects a group in iTop but it don't get assigned.
- if a user get's deactivated in our AD this user won't be disabled in iTop
Our Idea
Therefore we want to perform a deletion of all user accounts (not persons) in iTop at night an run a new sync. But to do so we also need to delete the Synchronization Data Sources because they are blocking the deletion of users.
Is there a mysql command or a API call to remove both Synchronization Sources and all users from command line to run this command as a cron job?
Greets Shorty
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi there,
because there is no update on the LDAP Connector from iTop we need to build a workaround to delete users at night to have a correct group handling from our LDAP.
Our Setup
We are using the LDAP Connector from the iTop Hub to import users from our LDAP to iTop that are member of a certain OU group every 3 hours. If we assign groups in LDAP like Portal-User we use the group P_ITOP_Portal-User. This is working quiet well, but it has 2 bugs that we have faced.
- If a user need to switch the group we assign him to another LDAP-Group that reflects a group in iTop but it don't get assigned.
- if a user get's deactivated in our AD this user won't be disabled in iTop
Our Idea
Therefore we want to perform a deletion of all user accounts (not persons) in iTop at night an run a new sync. But to do so we also need to delete the Synchronization Data Sources because they are blocking the deletion of users.
Is there a mysql command or a API call to remove both Synchronization Sources and all users from command line to run this command as a cron job?
Greets Shorty
Hello,
First the collector code repositories are public and opened to contributions...
About the groups, what is your collector configuration ? Are you using the synchronize_profiles option ?
About user getting disabled, you should be able to map the corresponding ldap field to the iTop User.disabled field in your collector configuration ?