Active Directory Change Poller
, (*1)
This package is PHP implementation of algorithm of polling for changes in Active Directory servers
using uSNChanged attribute with additional
features allowing custom adjustments for Active Directory fetching processes and changesets handling., (*2)
The main usage purpose is to keep you application in sync with Active Directory structure., (*3)
Overview
The core concept is to constantly poll Active Directory server and perform incremental fetch to obtain changesets using uSNChanged attribute as an offset.
Each poll task run is persisted in database to save the offset and fetch statistics.
In case of Active Directory controller swap, server failures or initial run algorithm performs full fetch to obtain the fullset.
Received data is subject to deliver to the target application to be handled., (*4)
The component consists of three main parts: poller, fetcher and synchronizer., (*5)
Poller
This is a heart of the library and base implementation of original polling algorithm.
Uses fetcher to interact with Active Directory Server in order to fetch changesets and synchronizer
to process obtained changesets., (*6)
See Poller implementation for details., (*7)
Fetcher
This part is responsible to interact with Active Directory. Allows poller to fetch neccessary metadata from Active Directory
and search changesets using zendframework/zend-ldap., (*8)
See LdapFetcher implementation for details., (*9)
Synchronizer
Synchronizer is about handling datasets received during polling process.
Base implementation uses symfony/event-dispatcher to publish changesets/fullset as an Events.
For incremental sync there is a IncrementalSyncEvent,
for full sync - FullSyncEvent., (*10)
See EventSynchronizer implementation for details., (*11)
Component provides SynchronizerInterface which allows implementation of your own
synchronizer for custom aims., (*12)
Setup and usage
Package installation
To install the package use composer:, (*13)
composer require gtt/ad-poller
Database setup
It is possible to generate schema using doctrine console utils.
You can clone the repository from scratch, adjust cli-config.php with credentials to your test database and generate init sql:, (*14)
composer install && php ./vendor/bin/doctrine orm:schema-tool:create --dump-sql
Application setup
Create poller:, (*15)
// configure ldap connector
$ldapConnector = new Ldap(
// Connector options. @see https://github.com/zendframework/zend-ldap for details
[
'host' => 'ldap.myorg.com',
'username' => 'poller@ldap.myorg.com',
'password' => 'secret',
'accountDomainName' => 'ldap.myorg.com',
'baseDn' => 'DC=myorg,DC=com'
]
);
// configure ldap fetcher
$ldapFetcher = new \Gtt\ADPoller\Fetch\LdapFetcher(
$ldapConnector,
// Optional ldap filter describes entries to fetch during full sync
'&(objectClass=user)(objectCategory=person))',
// Optional ldap filter describes entries to fetch during incremental sync.
// It can differ from the previous one if you want track deactivatation of entities
// (during full sync you need only active, but here - not)
'&(objectClass=user)(objectCategory=person))',
// Optional ldap filter describes deleted entries to fetch during incremental sync
'&(objectClass=user)(objectCategory=person))',
// list of properties to be fetched
['cn', 'displayname','telephonenumber', 'description']
);
// you also can specify additional ldap search options here if you need, for example:
$ldapFetcher->setLdapSearchOptions(LDAP_OPT_SERVER_CONTROLS, [['oid' => '1.2.840.113556.1.4.529']]);
// configure entity manager to persist poll tasks
$em = \Doctrine\ORM\EntityManager::create($conn, $config);
// configure synchronizer (use your own SynchronizerInterface implementation if needed)
$sync = new \Gtt\ADPoller\Sync\Events\EventSynchronizer(new \Symfony\Component\EventDispatcher\EventDispatcher());
// configure Poller itself
$poller = new Poller(
$ldapFetcher,
$sync,
$em,
// optionaly you can tell poller to fetch deleted entries
// @see https://msdn.microsoft.com/en-us/library/ms677927(v=vs.85).aspx for details
false
// optional poller name - use it if you have different pollers
'mypoller'
);
You also can create as many pollers as you want with different settings depending on your needs., (*16)
Now you can poll Active Directory permanently (normally using crontab) runing something like this:, (*17)
$poller->poll();
There is also console command that represents convenient way to run pollers with pretty output and additional options
if you use use symfony/console:, (*18)
// bin/console (do not forget #!/usr/bin/env php at very first line)
// create poller collection
$pollerCollection = new \Gtt\ADPoller\PollerCollection();
// Add poller to collection:
$pollerCollection->addPoller($poller);
// create application and command
$application = new \Symfony\Component\Console\Application();
$application->add(new \Gtt\ADPoller\Command\PollCommand($pollerCollection));
$application->run();
And put into crontab command to run all pollers:, (*19)
php bin/console gtt:pollers:run
or concrete one:, (*20)
php bin/console gtt:pollers:run --poller=mypoller
Framework integration
There is a gtt/ad-poller-bundle which integrates component in Symfony2+ ecosystem, (*21)
Testing
To run library test suite just clone the repository and execute the following inside:, (*22)
composer install && ./vendor/bin/phpunit
Wallogit.com
fduch