Features
- synchronizes users from Active Directory or openldap into Google Apps
- detects new and exited users automatically and changes Google Apps accounts accordingly
- handles user id / account renames automatically
- handles attribute updates automatically
- keeps track of changes and only propagates deltas (to allow syncing every 10 minutes for example)
This tool uses an API that is deprecated (see GData Provisioning API 1.0). You might want to consider using the following alternative:
Installation
Be sure you have Python 2.4 or later installed.
Download a read only copy of ldap-sync with
svn checkout http://google-apps-for-your-domain-ldap-sync.googlecode.com/svn/trunk/ google-apps-for-your-domain-ldap-sync
You can also download the tarball if you prefer.
You must use the python client of the Google Apps provisioning API v1.0. To download a copy use
svn checkout http://google-apps-provisioning-api-client.googlecode.com/svn/trunk/python google-apps-provisioning-api-client
or download the latest provisioning api python client library.
Be sure to set your PYTHONPATH to the root of where the python client library is loaded (there should be a google/appsforyourdomain subfolder below wherever PYTHONPATH points if you've done it correctly).
Finally, download and install the latest python-ldap from sourceforge.
Usage
See the document How to Use It