[Zope] Re: Zope to ldif

[Sam Stainsby]

On Thu, 11 May 2006 20:35:53 +0000, Jamie Bullock wrote:
 
> Does anyone have a script or any advice for exporting Zope users and groups to an LDIF file?

I have built such a script for a client, though the 'users' and 'groups'
that the script works on are workflowable content objects in Plone
(similar to the approach used CMFMember). It is then fairly easy to find
users and groups in the portal catalog and map then to appropriate LDAP
attributes. Writing LDIF to update an existing LDAP repository (rather
than just rebuilding it completely) took me quite a while to get right.
The script is about 700 LOC (including blank lines & comments) - it is not
trivial, unless you are just going to rebuild your LDAP each time.

If not using Plone, CMFMemmber, etc. then imagine you could extract users
and groups directly out of Zope and use member properties etc to find the
LDAP attributes that you need.

Let me know if you want me to ask my client to open source a version of
the script. They are generally agreeable with that sort of thing. At some
stage we may open source the whole project.

PS: The aim of my client's project is to have a central staff directory
with all staff usernames and passwords, and group/role based authorization
info controlled though a single Plone Web interface. For example, I have
set up to be qmailGroup objects in LDAP so that mailing lists can be
controlled through the web UI when using mail servers that understand the
qmail schema. I am also using PAM LDAP to control access to apache 2 and
subversion, and using LDAP to control authentication and authorization on
other remote Zope servers.