Sync users, groups and OUs from OpenLDAP to Google Workspace
1.8K
Sync users, groups and OUs from OpenLDAP to Google Workspace.
docker run -d \
--name ldap-google-sync \
--restart unless-stopped \
-v /path/to/credentials.json:/secrets/credentials.json:ro \
-e SYNC_INTERVAL=1h \
-e LDAP_HOST=ldap.example.com \
-e LDAP_BASE_DN=dc=example,dc=com \
-e LDAP_BIND_DN=cn=admin,dc=example,dc=com \
-e LDAP_BIND_PASSWORD=secret \
-e GOOGLE_CREDENTIALS_FILE=/secrets/credentials.json \
-e [email protected] \
-e GOOGLE_DOMAIN=example.com \
-e SYNC_DRY_RUN=false \
-e SYNC_GROUPS=true \
startcodex/ldap-sync-google:latest
| Feature | Description |
|---|---|
| Users | Create, update, suspend, delete |
| Groups | Create, update, delete, manage members |
| OUs | Automatic creation from LDAP structure |
| Daemon mode | Run continuously (SYNC_INTERVAL=1h) |
| Dry-run | Test without applying changes |
| Rate limiting | Exponential backoff for Google API |
| Secure | Scratch base, ~10MB, 0 CVEs |
| Type | Attribute |
|---|---|
| posixGroup | memberUid (default) |
| groupOfNames | member |
| Variable | Description |
|---|---|
| LDAP_HOST | LDAP server |
| LDAP_BASE_DN | Base DN |
| GOOGLE_CREDENTIALS_FILE | Service account JSON path |
| GOOGLE_ADMIN_EMAIL | Admin email for impersonation |
| GOOGLE_DOMAIN | Google Workspace domain |
| Variable | Default | Description |
|---|---|---|
| SYNC_INTERVAL | 0 | Run interval (1h, 30m, 0=once) |
| SYNC_DRY_RUN | true | Simulate without changes |
| SYNC_USERS | true | Sync users |
| SYNC_GROUPS | false | Sync groups |
| SYNC_ORG_UNITS | false | Sync organizational units |
| LDAP_BIND_DN | - | LDAP bind DN |
| LDAP_BIND_PASSWORD | - | LDAP bind password |
Content type
Image
Digest
sha256:89cac936c…
Size
6.1 MB
Last updated
3 months ago
docker pull startcodex/ldap-sync-google:0.3.0