Euca - AD synchronisation template

euca-MSAD.lic

{

  "ldap-service":{

    "server-url":"ldap://192.168.91.43:389",
    "auth-method":"simple",
    "user-auth-method":"simple",
    "auth-principal":"cn=rodc,cn=Users,dc=eucalyptus,dc=lan",
    "auth-credentials":"{{ encrypted password }}",
    "use-ssl":"false",
    "ignore-ssl-cert-validation":"true",
    "krb5-conf":"/path/to/krb5.conf",
  },

  "sync":{

    "enable":"true",
    "auto":"true",
    "interval":"600",
    "clean-deletion":"true",
  },

  "accounting-groups":{

    "base-dn":"ou=eucalyptus,dc=eucalyptus,dc=lan",
    "id-attribute":"cn",
    "member-attribute":"member",
    "member-item-type":"cn",
    "selection":{

        "filter":"(&(objectClass=group)(!(memberOf=*)))"
    }
  },

  "groups":{

    "base-dn":"ou=eucalyptus,dc=eucalyptus,dc=lan",
    "id-attribute":"cn",
    "member-attribute":"member",
    "member-item-type":"cn",
    "selection":{

        "filter":"(&(objectClass=group)(memberOf=*))"
    }
  },

  "users":{

    "base-dn":"ou=eucalyptus,dc=eucalyptus,dc=lan",
    "id-attribute":"cn",
    "user-info-attributes":
    {
        "displayname":"Full name"
    },
    "selection":{

        "filter":"(&(objectClass=organizationalPerson)(objectClass=user))",
    }
  },
}