hlavki / g-suite-identity-sync

G Suite to LDAP identity synchronizer
Apache License 2.0
128 stars 29 forks source link

Question: Is it possible to sync all GSuite users into the LDAP without manually sign-in for each user? #60

Closed muhx closed 4 years ago

muhx commented 4 years ago

Hi @hlavki, what a great app. I am curious in some of the functionality of this application. Is it possible to do full periodical sync of the G-Suite account and group into the LDAP without forcing the user to manually sign-in one by one?

hlavki commented 4 years ago

Thanks @lesmono, this functionality is not supported at this moment. The reason is simple:

  1. There is no way, how to synchronize password from GSuite to LDAP

So if you synchronize all users without setting password, they can't login.

muhx commented 4 years ago

Ok noted. When does scheduled synchronizers run? Can we set the value (e.g every 1 minute, or every 01:00 AM )? Also, what version of JDK to develop this app? I tried to build and run it in my local, but produce some errors, I think it's related to the version of installed JDK.

Here is the error:

../services/google/api/src/main/java/eu/hlavki/identity/services/google/impl/PushNotificationServiceImpl.java:[98,24] cannot find symbol
[ERROR]   symbol:   method isEmpty()
[ERROR]   location: variable channel of type java.util.Optional<eu.hlavki.identity.services.google.model.PushChannel>
~ java -version

java version "1.8.0_231"
Java(TM) SE Runtime Environment (build 1.8.0_231-b11)
Java HotSpot(TM) 64-Bit Server VM (build 25.231-b11, mixed mode)
hlavki commented 4 years ago
  1. To build application you need java 11.
  2. You can configure when scheduler runs. Default is every hour, but you can configure it. It uses apache karaf scheduler. The way how to configure you can find in karaf documentation.
  3. If you need run synchronization every minute, then better option is to use push notifications, where google notifies you on every change.
hlavki commented 4 years ago

Closing this, but feel free to reopen or create new one If you have another question.

muhx commented 4 years ago

Thanks, man, appreciated. I hope I can contribute more to this cool app in the future.