Import/export LDAP users, groups and e-mail addresses

[DavidePrincipi]

Import and export LDAP users and their attributes, like password and email address, and group definitions.

Proposed solution

Import/export data in CSV file format, reflecting NethVoice CSV schema¹

Implement cluster-admin actions and user-portal handlers for both Samba and OpenLDAP:

• cluster-admin Samba import-users
• cluster-admin Samba export-users
• user-portal Samba import-users
• user-portal Samba export-users
• cluster-admin OpenLDAP import-users
• cluster-admin OpenLDAP export-users
• user-portal OpenLDAP import-users
• user-portal OpenLDAP export-users

See also

• https://community.nethserver.org/t/users-csv-or-similar-import/25649
• sync-up Sep '25 https://mattermost.nethesis.it/nethesis/pl/mppgx8zbbtnw7jdjfd3o49cnzy
• NethVoice reqs: https://mattermost.nethesis.it/nethesis/pl/8xm5qcmkofdbdmk4skct4sd9kc

Footnotes

1. https://docs.nethvoice.com/docs/administrator-manual/configuration/wizard#import-and-export-users ↩

[DavidePrincipi]

In Testing

1. openldap 2.6.0-dev.1 2.6.0-dev.4
2. samba 3.4.0-dev.1 3.4.0-dev.5

Test case

• Check import-users and export-users actions correctly import and export users and groups.
• Test both Samba and OpenLDAP.
• Test multiple runs with both skip_existing:false and skip_existing:true. When skip is enabled, the record of existing user is completely ignored.
• Simulate input data inconsistencies: extended UTF chars, group name with different case (e.g. "Domain Admins", "domain admins")

A massive import can be executed as documented here: https://nethserver.github.io/ns8-core/core/user_domains/#importexport-users-apis

⚠️ OpenLDAP does not implement password "must change" and "never expire" flags. The respective API attributes are present for Samba interoperability.