How to sync group memberships

[nilskretschmer]

Hi,

from the docs:
With LdapRecord-Laravel, you can easily import and synchronize LDAP objects into a database table using a given Eloquent model. This is useful for importing groups, memberships and more.

Now this setup:

1. A User Model
2. A Group Model
3. A group_user intermediate table for a many-to-many relation for user groups (group memberships)

Importing users and groups is described in the docs, but what about memberships? How can I sync group memberships to my intermediate table? It seems like this requires some custom logic and is not directly possible using this package, right?

For me the workflow would be something like:

1. Import/Sync Users
2. Import/Sync Groups
3. Get all members from each group and implement some sync logic to map the members of each group to local users and attach/sync them to the user-group-relationship

Is there a built-in way of doing this?

[stevebauman]

Hi @nilskretschmer,

It seems like this requires some custom logic and is not directly possible using this package, right?

You're correct -- there is no built-in way to do this. You will have to implement this yourself.

Something like this may work for you after you've run a successful import of LDAP users:

use App\Models\User as EloquentUser;
use App\Models\Group as EloquentGroup;
use LdapRecord\Laravel\Import\Synchronizer;
use LdapRecord\Models\ActiveDirectory\Group as LdapGroup;

$config = [
    'sync_attributes' => [
        'name' => 'cn'
    ],
];

$synchronizer = new Synchronizer(EloquentGroup::class, $config);

foreach (LdapGroup::get() as $ldapGroup) {
    // Sync the group into the local database.
    $eloquentGroup = $synchronizer->run($ldapGroup);

    $eloquentGroup->save();

    // Retrieve all of the LDAP group member's object GUIDs.
    $memberObjectGuids = $ldapGroup->members()->get()->pluck('objectguid');

    // Sync the local group's users with the matching object GUIDs from the already imported users.
    $eloquentGroup->users()->sync(
        EloquentUser::whereIn('objectguid', $memberObjectGuids)->get()
    );
}

[nilskretschmer]

Hi @stevebauman

thank you very much for your response. This looks even a bit shorter than I had it in mind. I think this snippet should deserve a place in the docs, because it could help others to achieve the same. After implementing it I could also verify that it's working as expected.