Problem: Additional attributes need to be synced by the S4-Connector

[scheinig]

Problem:

Additional attributes need to be synced by the S4-Connector
As already described with examples for the AD Connector

Problem: Additional attributes need to be synced by the AD-Connector

Problem: Additional attributes like an employeeNumber for users or the displayName of groups need to be synced by the AD-Connector. Recommendation Since UCS 4.4-7 we introduced the localmapping. To map additional attributes you can define a mapping hook inside the (newly to be created) file /etc/univention/connector/ad/localmapping.py like this: import univention.connector def mapping_hook(ad_mapping): ad_mapping['user'].post_attributes['employeeNumber'] = \ univention.connector.attribu…

it is also possible to adjust a localmapping for the s4 connector

import univention.s4connector.s4.mapping
def mapping_hook(s4_mapping):
    return s4_mapping

Example to exept some dns zones from sync, an other way for using ucr Variables:

import univention.s4connector.s4.mapping
def mapping_hook(s4_mapping):
    reverse_ldap = [
        "zoneName=147.18.172.in-addr.arpa,cn=dns,dc=schein,dc=me",
        "zoneName=193.18.172.in-addr.arpa,cn=dns,dc=schein,dc=me",
            ]
    reverse_s4 = [
        "DC=147.18.172.in-addr.arpa,CN=MicrosoftDNS,DC=DomainDnsZones,DC=schein,DC=me",
        "DC=193.18.172.in-addr.arpa,CN=MicrosoftDNS,DC=DomainDnsZones,DC=schein,DC=me",
            ]
    s4_mapping['dns'].ignore_subtree += reverse_ldap
    s4_mapping['dns'].ignore_subtree += reverse_s4
    return s4_mapping