<HTML>
<HEAD>
<TITLE>Perl/python script to sync with AD</TITLE>
</HEAD>
<BODY>
<FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Dear All,<BR>
<BR>
I finally got the 389-ds working with PAM-PTA and everything looks fine so far. I am investigating on scripting the AD sync using perl/python/ldapscripts(shell). Anybody has any advice on the choice. I see perl’s Net:LDAP is pretty comprehensive with easy to use functions, but just in case if your opinion differs. I have a Perl script which partially does the job and wouldn't mind sharing if you want to take a peep.<BR>
<BR>
requirements:<BR>
</SPAN></FONT><OL><LI><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Sync one-way from AD --> LDAP with only posix attributes.
</SPAN></FONT><LI><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Disable/delete accounts in ldap if disabled/deleted in AD.
</SPAN></FONT><LI><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Sync Groups and its members.<BR>
</SPAN></FONT></OL><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
PS: I am a newbie with scripting.<BR>
<BR>
Thanks,<BR>
Prashanth<BR>
<BR>
<BR>
<BR>
</SPAN></FONT>
</BODY>
</HTML>