<?xml version="1.0" ?>
<lsc xmlns="http://lsc-project.org/XSD/lsc-core-2.1.xsd" revision="0">

  <connections>
<!-- OpenLDAP connection -->
    <ldapConnection>
      <name>openldap</name>
      <url>ldap://192.168.56.103/dc=nodomain</url>
      <username>cn=admin,dc=nodomain</username>
      <password>tester</password>
      <authentication>SIMPLE</authentication>
      <referral>IGNORE</referral>
      <derefAliases>NEVER</derefAliases>
      <version>VERSION_3</version>
      <pageSize>-1</pageSize>
      <factory>com.sun.jndi.ldap.LdapCtxFactory</factory>
      <tlsActivated>false</tlsActivated>
    </ldapConnection>
<!-- AD connection -->
    <ldapConnection>
      <name>ad</name>
      <url>ldaps://dc.test.opensides.be/DC=test,DC=opensides,DC=be</url>
      <username>administrator@test.opensides.be</username>
      <password>jonathan0#</password>
      <authentication>SIMPLE</authentication>
      <pageSize>1000</pageSize>
    </ldapConnection>
  </connections>

  <audits>
    <csvAudit>
      <name>csv</name>
      <append>true</append>
      <operations>create, delete</operations>
      <file>/tmp/dump.csv</file>
      <datasets>cn, dn</datasets>
      <separator>,</separator>
    </csvAudit>
   </audits>

  <tasks>
    <task>
      <name>samba4</name>
      <bean>org.lsc.beans.SimpleBean</bean>
      <ldapSourceService>
        <name>openldap-source-service</name>
        <connection reference="openldap" />
        <baseDn>ou=people,dc=nodomain</baseDn>
        <pivotAttributes>
          <string>uid</string>
        </pivotAttributes>
        <fetchedAttributes>
          <string>cn</string>
          <string>givenName</string>
          <string>sn</string>
          <string>userPassword</string>
          <string>uid</string>
        </fetchedAttributes>
        <getAllFilter>(&amp;(objectClass=sambaSamAccount)(uid=_UID_))</getAllFilter>
        <getOneFilter>(&amp;(objectClass=sambaSamAccount)(uid={uid}))</getOneFilter>
        <cleanFilter>(&amp;(objectClass=sambaSamAccount)(uid=_UID_))</cleanFilter>
      </ldapSourceService>

      <ldapDestinationService>
        <name>ad-dst-service</name>
        <connection reference="ad" />
        <baseDn>CN=Users,DC=test,DC=opensides,DC=be</baseDn>
        <pivotAttributes>
          <string>sAMAccountName</string>
        </pivotAttributes>
        <fetchedAttributes>
          <string>cn</string>
          <string>givenName</string>
          <string>objectclass</string>
          <string>pwdLastSet</string>
          <string>sAMAccountName</string>
          <string>sn</string>
          <string>userPrincipalName</string>
          <string>unicodePwd</string>
          <string>userAccountControl</string>
        </fetchedAttributes>
        <getAllFilter><![CDATA[(&(objectClass=user)(sAMAccountName=_UID_))]]></getAllFilter>
        <getOneFilter><![CDATA[(&(objectClass=user)(sAMAccountName={uid}))]]></getOneFilter>
      </ldapDestinationService>

      <propertiesBasedSyncOptions>
        <mainIdentifier>"CN=" + srcBean.getDatasetFirstValueById("uid") + ",CN=Users,DC=test,DC=opensides,DC=be"</mainIdentifier>
        <defaultDelimiter>;</defaultDelimiter>
        <defaultPolicy>FORCE</defaultPolicy>
        <conditions>
          <create>true</create>
          <update>true</update>
          <delete>true</delete>
          <changeId>false</changeId>
        </conditions>
        <dataset>
          <name>objectclass</name>
          <policy>KEEP</policy>
          <createValues>
            <string>"user"</string>
            <string>"organizationalPerson"</string>
            <string>"person"</string>
            <string>"top"</string>
          </createValues>
        </dataset>
        <dataset>
         <name>sAMAccountName</name>
         <policy>KEEP</policy>
         <createValues>
          <string>srcBean.getDatasetFirstValueById("uid")</string>
         </createValues>
        </dataset>
        <dataset>
         <name>userPrincipalName</name>
         <policy>FORCE</policy>
         <forceValues>
          <string>srcBean.getDatasetFirstValueById("uid") + "@test.opensides.be"</string>
         </forceValues>
        </dataset>
        <dataset>
         <name>cn</name>
         <policy>FORCE</policy>
         <forceValues>
          <string>srcBean.getDatasetFirstValueById("uid")</string>
         </forceValues>
        </dataset>
        <dataset>
         <name>userAccountControl</name>
         <policy>KEEP</policy>
         <createValues>
          <string>AD.userAccountControlSet("0", [AD.UAC_SET_NORMAL_ACCOUNT])</string>
         </createValues>
        </dataset>
        <dataset>
         <name>pwdLastSet</name>
         <policy>KEEP</policy>
         <createValues>
          <string>"-1"</string>
         </createValues>
        </dataset>
        <dataset>
         <name>unicodePwd</name>
         <policy>FORCE</policy>
         <createValues>
          <string>AD.getUnicodePwd("_USERPASSWORD_")</string>
         </createValues>
        </dataset>
      </propertiesBasedSyncOptions>
    </task>
  </tasks>

  <security>
    <encryption>
      <keyfile>etc/lsc.key</keyfile>
      <algorithm>AES</algorithm>
      <strength>128</strength>
    </encryption>
  </security>
</lsc>