Features

• synchronizes users from Active Directory or openldap into Google Apps
• detects new and exited users automatically and changes Google Apps accounts accordingly
• handles user id / account renames automatically
• handles attribute updates automatically
• keeps track of changes and only propagates deltas (to allow syncing every 10 minutes for example)

This tool uses an API that is deprecated (see GData Provisioning API 1.0). You might want to consider using the following alternative:

Google Apps Directory Sync

Installation

Be sure you have Python 2.4 or later installed.

Download a read only copy of ldap-sync with

svn checkout http://google-apps-for-your-domain-ldap-sync.googlecode.com/svn/trunk/ google-apps-for-your-domain-ldap-sync

You can also download the tarball if you prefer.

You must use the python client of the Google Apps provisioning API v1.0. To download a copy use

svn checkout http://google-apps-provisioning-api-client.googlecode.com/svn/trunk/python google-apps-provisioning-api-client

or download the latest provisioning api python client library.

Be sure to set your PYTHONPATH to the root of where the python client library is loaded (there should be a google/appsforyourdomain subfolder below wherever PYTHONPATH points if you've done it correctly).

Finally, download and install the latest python-ldap from sourceforge.

Usage

See the document How to Use It