This section covers the group DN mapping file. In this example, we create a mapping between the groups DN in the native Domino directory with the DN in the Active Directory LDAP. Before this mapping can occur however, the Domino groups used in Quickr Domino must be synchronized with Active Directory LDAP. Group synchronization is outside the scope of this wiki. Rather than write an AssemblyLine to perform a comparison between the two LDAP directories, we rely on the collect_groups.dns file created for the unique ID mapping process. The first column of this file contains the group DN from Active Directory LDAP. The second column is the unique ID, which we do not need for this DN mapping. We can assume that because Domino groups are typically flat in the directory (no OU or O), all we need to do is extract the group name from Active directory DN and use it as the Domino name, followed by the Active Directory DN in the DN mapping file. This assumption falls apart when group names contain a slash. For example, a Domino group called Home/Marketing has a value of CN=Home/O=Marketing in the ListName field of the Domino group document. The group synchronization process has to determine how these groups with a CN and O component in the name sync to LDAP. Those rules must be applied to the mapping file to ensure an absolute map between the Domino group and the LDAP group.
Groups DN mapping file
- Create a new AssemblyLine.
- Name it CreateGroupDNMapping.
- Add a File System connector called GroupDNs with the mode set to Iterator and click Next.
- Enter collect_group.dns and click Next.
- Select the CSV Parser.
- Expand the Advanced sections and add DN and GUID to the Field Names box in the order shown and click Finish.
- Click Connect followed by the several clicks of the Next button to populate the Schema table. Click Close, then drag the DN entry in the Schema to the Work Attribute column.
- Add another File System connector. Name it WriteDNMapping and set the mode to AddOnly. Click Next.
- Enter group_mapping.csv in the File Path and click Next. The file is created in the TDI solution directory, which is /root/QuickrMig/TDI.
- Select the CSV Parser.
- Enter DomGroup and DN to the Field Names box in the order shown. Uncheck Enable quoting and Write header. Add UTF-8 to the Character Encoding field. Click Finish.
- Double click the "[Empty map.." text.
- Select DN and click OK.
- Click Add.
- Enter DomGroup in the Enter new name box and click OK.
- Double click on work.DomGroup in the Assignment column.
- Remove the work.DomGroup string and replace it with the following lines. These lines extract the group name from the Active Directory DN and return it to the connector's DomGroup entry.
- Save the AssemblyLine and click Run in console.
- Examine the contents of /root/QuickrMig/TDI/group_mapping.csv. The format should be similar to the following. Copy the group_mappping.csv to D:\LDAPData on the Quickr Domino server