OP5 Monitor - How to sync contact groups with LDAP

The LDAP Helper module can be used in organizations desiring to utilize LDAP groups to populate contact groups in OP5 Monitor.

Installation

Steps to set up the LDAP helper module:

Please install only on the master, not master-peers. Except for needing to have LDAP sync on master-peers in the event of a failover scenario (rare).

1. Download the ldap helper module archive (tar.gz).
2. Extract the folder to /opt on the OP5 server.

Configure

Configure the LDAP helper module :

1. Modify: /opt/op5-ldap-helper/op5-ldap-helper.conf.yml

   1. Verify lines 2 & 3 match the name of the auth connector driver. (i.e. LDAP)

      NOTE: The sync action utilizes the existing LDAP Auth Module configuration.

   2. Modify lines 26 & 27 if you would like to filter for specific groups.

      1. custom_group_filter - For adding (cn=*GROUP_NAME*) include the asterisks but change GROUP_NAME of the group would "enable" OP5 to scan this specific group. 

   3. Modify lines 46 & 47 with the user for API access to OP5 Monitor.
      
      1. op5api - In order for the script to work with OP5 a user "apiuser" was created in OP5. The credentials are stored in this file.
2. Setup a contact group prefaced with "LDAP_" for example "LDAP_testgroup".

Using the module

Running the script to sync groups:

1. Once the group is configured within the config file, go to /opt/op5-ldap-helper/ and run the following: ./op5-ldap-helper.pl
2. To see available help use: ./op5-ldap-helper.pl -h
3. To perform a dry run (no save), and get detailed output use: ./op5-ldap-helper.pl -d -C -n
4. To perform a run with sync, simply run: ./op5-ldap-helper.pl
5. Consider creating a cron job to periodically sync groups.