Google Sync - GADS specify OU's

[plexer]

I want to only sync users in specified OU's or possible a group if that's easier, dirsync for O365 made this easy enough.

 

Has anyone done this with GADS and could help?

 

Thanks

 

Ben

[JSchlackman]

Yep, you do this in the Org Units section, on the Search Rules tab. Official docs are here to get you started: Org Unit Search Rules

 

Doing it by OU is simpler to implement but it just uses LDAP filter queries so group membership should be possible if that's the preferred option.

Edited January 7, 2014 by JSchlackman

[plexer]

That looks like it's just creating structure though rather than excluding users that aren't in those OU's? I've looked at the documentation but just can't get my head around it.

 

Ben

[pcstru]

Yes you can. We sync based on OU + membership of a group "GoogleAppsUsers", however our directory structures are different (AD has a bit of the "organic growth" look about it!) so we have to use a bunch of rules to map the structure.

 

The filter within the OU is like :

(&(objectCategory=person)(ObjectClass=user)(memberOf=CN=GoogleAppsUsers,DC=ourschool,DC=org,DC=uk))

 

We use the Org Unit Name and specify the base DN to do the OU mapping.

 

(this is in User Accounts, Search Rules).

 

Does that make sense?

[JSchlackman]

That looks like it's just creating structure though rather than excluding users that aren't in those OU's?

It does both. Once a Search Rule is created, anything not matched by the specified rules doesn't get synced.