ldap2pg 2.0

Synchronize PostgreSQL roles from LDAP

Swiss-army knife to synchronize Postgres roles and ACLs from any LDAP directory.

Features

• Creates, alter and drops PostgreSQL roles from LDAP queries.

• Creates static roles from YAML to complete LDAP entries.

• Manage role members (alias groups).

• Grant or revoke custom ACL statically or from LDAP entries.

• Dry run.

• Logs LDAP queries as ldapsearch commands.

• Logs every SQL queries.

• Reads settings from YAML config file.

$ cat ldap2pg.yml
sync_map:
  ldap:
    base: ou=people,dc=ldap2pg,dc=local
    filter: "(objectClass=organizationalRole)"
    attribute: cn
  role:
    name_attribute: cn
    options: LOGIN
$ ldap2pg --real
Using ./ldap2pg.yml.
Using /home/.../src/dalibo/ldap2pg/ldap2pg.yml.
Starting ldap2pg 1.0.
Running in real mode.
Inspecting Postgres...
Querying LDAP cn=dba,ou=groups,dc=ldap2pg,dc=local...
Querying LDAP ou=groups,dc=ldap2pg,dc=local...
Create alan.
Create dave.
Create david.
Create ldap_users.
Add ldap_users members.
Add missing backend members.
Delete spurious backend members.
Update options of alice.
Would reassign oscar objects and purge ACL on backend.
Would reassign oscar objects and purge ACL on frontend.
Would reassign oscar objects and purge ACL on legacy.
Would reassign oscar objects and purge ACL on postgres.
Would reassign oscar objects and purge ACL on template1.
Drop oscar.
Synchronization complete.
$

See versionned ldap2pg.yml for further options.

Installation

Install it from PyPI tarball:

pip install ldap2pg

ldap2pg is licensed under PostgreSQL license.