Force sync a ldap user through command line or API

[goyome]

How to use GitHub

• Please use the 👍 reaction to show that you are interested into the same feature.
• Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
• Subscribe to receive notifications on status change and new comments.

Is your feature request related to a problem? Please describe.
I'm using the app user_ldap to synchronize users into nextcloud.
When I try to synchronize large population, the time needed for new users to appear in nextcloud users can be really long (some have taken days). I tried to increase the value of ldap_paging_size but the time for syncing new users will depend on the current offset and the number of loop needed to extract new users.
The sync itself is not happening at every cron execution and make the total sync time even longer.

Describe the solution you'd like
I would like to be able to synchronize a specific user who I know was added to ldap shortly before. There could be a cli call verifying the existence of the user in ldap and syncing it if it does exist.
php occ ldap:sync username

Describe alternatives you've considered
Another way could be to find a way to sync new account or recently modified accounts by filtering on modifyTimestamp > last_execution_time.

Additional context
There seems to be hard-coded min and max interval value in the sync job (apps/user_ldap/lib/Jobs/Sync.php). I'm not sure if they're not doing more harm than good.

[CarlSchwan]

Hi, I'm wondering if `php occ ldap:check-user username --update' already do what you want?

[goyome]

Hi, thanks for your reply.
I hoped it does but in fact check-user --update does only update attribute when the mapping between ldap and nextcloud already exists.
I'd like a way to speed up account creation on first appearance in ldap.
In fact, I could be able, by other means, to detect this addition to ldap. That's why I suggested a new cli method to force sync an account. But the ideal solution, which would work for everybody, would be to detect new account (I was thinking of using modifyTimestamp) and sync them before looping to update attribute.

[szaimen]

cc @nextcloud/ldap is this feasible?

This issue has been automatically marked as stale because it has not had recent activity and seems to be missing some essential information. It will be closed if no further activity occurs. Thank you for your contributions.

[goyome]

If you think that it could be possible but you don't have time to do it, could you maybe describe an idea to implement it. We could try to make a PR according to your suggestion.

[szaimen]

If you think that it could be possible but you don't have time to do it, could you maybe describe an idea to implement it. We could try to make a PR according to your suggestion.

cc @blizzz

[blizzz]

occ ldap:search '' --limit=5000 where limit the number of users in LDAP, rounded up to a multiple of 500 (or what ever you have set as chunk size). Mind, cache (TTL value) may interfere.

[goyome]

Thanks for your reply.
I'm going to try to combine the code from Jobs/Sync.php and Command/Search.php to have a new occ command.

This issue has been automatically marked as stale because it has not had recent activity and seems to be missing some essential information. It will be closed if no further activity occurs. Thank you for your contributions.