AD Syncing

[Will Jenkins]

Greetings,

Forgive me if this is a stupid question - I'm evaluating Munki/Simian for use in my environment and want to understand this area before investing time in setting up a proof of concept.

I'm in an environment that has a cross-platform software catalog which manages the process of getting manager approval etc, and then puts approved users in an AD group for each software title.

What is the best way to sync additions/subtractions from the AD groups as manifest modifications?

I found an old previous topic on this and wondered if any progress had been made in the directions suggested by Justin?

Thanks,

Will

[Justin McWilliams]

Will,

Apologies for the moderator/spam filter confusion and associated delayed response.

Unfortunately we haven't improved group membership sync options since the referenced thread.  We're happy to accept pull requests, if you have sufficient time for the suggested implementation.

- Justin

[Thomas Maerz]

This would be amazing to implement -- One of the things that I see as a design hurdle though is that this is a cloud app. It wouldn't be a problem for me as our instance runs on-premise with AppScale, but most AD admins are reluctant to allow cloud apps to connect directly to the AD LDAP from the internet. One way to get around this might be to generate your catalog/manifests on premise from the AD groups, then push them to GAE via the API.

[Will Jenkins]

Hello both,

I will have a look at implementing the original thread's recommendation.

Thanks,

Will

--
You received this message because you are subscribed to the Google Groups "Simian Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to simian-discus...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Will Jenkins]

Hi Justin,

I've had a go at implementing group syncing, let me know what you think:

https://github.com/google/simian/pull/37

Thanks,

Will

--