Google Cloud Directory Sync - LDAP code to add all users/groups

[ronnoco]

Hello all,

 

We want to move to a new e-mail solution and have decided on Google Apps For Education. All set-up and linked to our domain and i'm now at the stage where I want to add users to create the new accounts. I have installed Google Cloud Directory Services, got it talking to AD, everything is working - the only problem I have is to do the sync, you have to have at least one rule for adding LDAP Users and one for adding LDAP groups.

 

All i'm looking to do is import all AD users and groups but I can't work out the string I need to enter as the rule to do this.

 

If I select the option to use the defaults, it wants to only import AD accounts that have an e-mail address associated with them which is only a third.

 

I have attached screenshots showing where you need to type the rule for both users and groups. Does anyone know what I need to enter or has anyone got this set-up and can give me some guidance on how I go about getting a simple sync set-up?

 

Thanks very much in advance for any help.

[mowgli82]

I think I used this as a basic guide: https://pingboard.com/blog/google-apps-directory-sync-gads/

 

I cant seem to find your screenshots

[ronnoco]

Thanks for the reply. Seems a good guide but is seems to not go any further than LDAP anymore. It's all installed, it's just what's needed in the boxes as per the screenshots (thanks for that!)

 

 

Can you tell me exactly what I need to type here to pull all users and groups for our base domain DC=NWHS,DC=LOCAL

 

I've tidied up AD so am happy to have mailboxes for the entire domain.

Edited November 1, 2016 by ronnoco

[mowgli82]

Here is what I have in mine:

 

Edited November 1, 2016 by mowgli82

[ronnoco]

Thanks very much for those screenshots.

 

I've made mine the same and ran a test and it's doing the same as what happened when I used the defaults, only finding accounts which have an e-mail address associated with them - 314 in total.

 

I'm trying to get my head round how all this works, all I really want to do is create a mailbox in GAFE matching the usernames of all users in AD. Is this what the sync does when you run it?, i.e. if I have a user called Fred Bloggs with an AD username of bloggsf, will it make an e-mail accounts called [email protected] ?

[mowgli82]

It will only find accounts with email because we are telling it to search on the mail attribute in AD.

 

I added my google apps mailbox domain to the email field of all users in AD %username%@domainname.com

[ronnoco]

ah, ok - that makes sense. I can live with that.

 

So just to clarify before I proceed. Our domain is nwhs.local and our GAFE domain nwhs.uk. If I change the e-mail field of all users in AD to be %username%@nwhs.uk - it will then create all 900 staff and student accounts in GAFE?

[mowgli82]

So just to clarify before I proceed. Our domain is nwhs.local and our GAFE domain nwhs.uk. If I change the e-mail field of all users in AD to be %username%@nwhs.uk - it will then create all 900 staff and student accounts in GAFE?

 

Yep )