Implementation of Data transformation

[Thelvaën Mandel]

Hello,

Having to work with multiple vCenters, and a quite big directory, I
searched quite extensively how to get the 2 to work together, and I managed
to find that reference:
https://www.freeipa.org/page/V4/Data_transformation

After digging further and inquiring about it on IRC, I was redirected here
by ab who said that Thierry might have more information about this project.

I'm currently reverse engineering existing plugins and I am planning to use
the SLAPI_PLUGIN_PRE_SEARCH_FN hook instead
of slapi_compute_add_search_rewriter written in the doc to harmonize it
with the SLAPI_PLUGIN_POST_SEARCH_FN needed to process the results.

I'll be happy for any help/feedback you could provide.

P.S. : plugin source will be available to the community once it has been
completed or reached enough maturity to be used in its experimental state.

Regards,
Thelvaen.

[Alexander Bokovoy]

Hello Thelvaën,

I added Thierry in CC:.

Thiery, do you have any prototyping code for a plugin that could be
written to implement the data transformation experiment we ran to
identify how we can translate uniqueMembers?

Thelvaën wants to help to develop such plugin.

On ma, 05 elo 2019, Thelvaën Mandel via FreeIPA-devel wrote:
> Hello,
>
> Having to work with multiple vCenters, and a quite big directory, I
> searched quite extensively how to get the 2 to work together, and I managed
> to find that reference:
> https://www.freeipa.org/page/V4/Data_transformation
>
> After digging further and inquiring about it on IRC, I was redirected here
> by ab who said that Thierry might have more information about this project.
>
> I'm currently reverse engineering existing plugins and I am planning to use
> the SLAPI_PLUGIN_PRE_SEARCH_FN hook instead
> of slapi_compute_add_search_rewriter written in the doc to harmonize it
> with the SLAPI_PLUGIN_POST_SEARCH_FN needed to process the results.
>
> I'll be happy for any help/feedback you could provide.
>
> P.S. : plugin source will be available to the community once it has been
> completed or reached enough maturity to be used in its experimental state.
>
> Regards,
> Thelvaen. 
> _______________________________________________
> FreeIPA-devel mailing list -- freeipa-devel(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-devel-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]... 

-- 
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland

[thierry bordaz]

Hi,

Sorry for the late answer, I am just back from PTO.

I have not implemented the described plugin [1] but it should not be a 
complex one.

Note that this small plugin is an option to satisfy the vsphere request. 
But I do not know if it would be suffisant, it would need some 
integration tests with vsphere. In order to confirm that returned 
vsphere groups are accepted by vsphere as they are 'groupofnames' and 
contains 'member' instead of being 'groupofuniquenames' and containing 
'uniquemember'. I think there is a good chance it will work as vsphere 
is not requesting those attributes.

[1] 
https://www.freeipa.org/page/V4/Data_transformation#transformation_of_filter

best regards
thierry

On 8/6/19 3:24 PM, Alexander Bokovoy wrote:
>  Hello Thelvaën,
>
>  I added Thierry in CC:.
>
>  Thiery, do you have any prototyping code for a plugin that could be
>  written to implement the data transformation experiment we ran to
>  identify how we can translate uniqueMembers?
>
>  Thelvaën wants to help to develop such plugin.
>
>  On ma, 05 elo 2019, Thelvaën Mandel via FreeIPA-devel wrote:
> > Hello,
> >
> > Having to work with multiple vCenters, and a quite big directory, I
> > searched quite extensively how to get the 2 to work together, and I 
> > managed
> > to find that reference:
> > https://www.freeipa.org/page/V4/Data_transformation
> >
> > After digging further and inquiring about it on IRC, I was redirected 
> > here
> > by ab who said that Thierry might have more information about this 
> > project.
> >
> > I'm currently reverse engineering existing plugins and I am planning 
> > to use
> > the SLAPI_PLUGIN_PRE_SEARCH_FN hook instead
> > of slapi_compute_add_search_rewriter written in the doc to harmonize it
> > with the SLAPI_PLUGIN_POST_SEARCH_FN needed to process the results.
> >
> > I'll be happy for any help/feedback you could provide.
> >
> > P.S. : plugin source will be available to the community once it has been
> > completed or reached enough maturity to be used in its experimental 
> > state.
> >
> > Regards,
> > Thelvaen.
>
> > _______________________________________________
> > FreeIPA-devel mailing list -- freeipa-devel(a)lists.fedorahosted.org
> > To unsubscribe send an email to 
> > freeipa-devel-leave(a)lists.fedorahosted.org
> > Fedora Code of Conduct: 
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives: 
> > https://lists.fedorahosted.org/archives/list/[e-mail]...
>
>

[Thelvaën Mandel]

Hello,

I understand that this plugin is purely to satisfy VMWare's applications,
and that's precisely why I want it.

Please note that vCenter also needs the entryUUID to be filed for users if
you wish to add them to local groups, I've seen it requiring those
attributes to the LDAP while dumping traffic.

Cordialement/Regards,
Thelvaen


Le mer. 7 août 2019 à 11:25, thierry bordaz <tbordaz(a)redhat.com&gt; a écrit :

>  Hi,
>
>  Sorry for the late answer, I am just back from PTO.
>
>  I have not implemented the described plugin [1] but it should not be a
>  complex one.
>
>  Note that this small plugin is an option to satisfy the vsphere request.
>  But I do not know if it would be suffisant, it would need some
>  integration tests with vsphere. In order to confirm that returned
>  vsphere groups are accepted by vsphere as they are 'groupofnames' and
>  contains 'member' instead of being 'groupofuniquenames' and containing
>  'uniquemember'. I think there is a good chance it will work as vsphere
>  is not requesting those attributes.
>
>  [1]
>
>  https://www.freeipa.org/page/V4/Data_transformation#transformation_of_filter
>
>  best regards
>  thierry
>
>  On 8/6/19 3:24 PM, Alexander Bokovoy wrote:
>  > Hello Thelvaën,
>  >
>  > I added Thierry in CC:.
>  >
>  > Thiery, do you have any prototyping code for a plugin that could be
>  > written to implement the data transformation experiment we ran to
>  > identify how we can translate uniqueMembers?
>  >
>  > Thelvaën wants to help to develop such plugin.
>  >
>  > On ma, 05 elo 2019, Thelvaën Mandel via FreeIPA-devel wrote:
>  >> Hello,
>  >>
>  >> Having to work with multiple vCenters, and a quite big directory, I
>  >> searched quite extensively how to get the 2 to work together, and I
>  >> managed
>  >> to find that reference:
>  >> https://www.freeipa.org/page/V4/Data_transformation
>  >>
>  >> After digging further and inquiring about it on IRC, I was redirected
>  >> here
>  >> by ab who said that Thierry might have more information about this
>  >> project.
>  >>
>  >> I'm currently reverse engineering existing plugins and I am planning
>  >> to use
>  >> the SLAPI_PLUGIN_PRE_SEARCH_FN hook instead
>  >> of slapi_compute_add_search_rewriter written in the doc to harmonize it
>  >> with the SLAPI_PLUGIN_POST_SEARCH_FN needed to process the results.
>  >>
>  >> I'll be happy for any help/feedback you could provide.
>  >>
>  >> P.S. : plugin source will be available to the community once it has been
>  >> completed or reached enough maturity to be used in its experimental
>  >> state.
>  >>
>  >> Regards,
>  >> Thelvaen.
>  >
>  >> _______________________________________________
>  >> FreeIPA-devel mailing list -- freeipa-devel(a)lists.fedorahosted.org
>  >> To unsubscribe send an email to
>  >> freeipa-devel-leave(a)lists.fedorahosted.org
>  >> Fedora Code of Conduct:
>  >> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  >> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  >> List Archives:
>  >>
>  https://lists.fedorahosted.org/archives/list/[e-mail]...
>  >
>  >
>
>