<?xml version="1.0" encoding="UTF-8"?>
<!-- Default values for parameters. Do NOT alter this file, use params.local.xml instead -->
<parameters>
	<!--  NOTE: ldaphost and ldapport are deprecated in favor of ldapuri -->
	<ldapuri></ldapuri>
	<ldapdn>DC=company,DC=com</ldapdn>
	<ldaplogin>CN=ITOP-LDAP,DC=company,DC=com</ldaplogin>
	<ldappassword>password</ldappassword>

	<!-- Parameters for Person synchronization -->
	<ldappersonfilter>(objectClass=person)</ldappersonfilter>
	<itop_group_pattern>/^CN=itop-(.*),OU=.*/</itop_group_pattern>
	<person_fields>
		<!--  Mapping between LDAP fields and iTop Person's object fields -->
		<primary_key>samaccountname</primary_key>
		<name>sn</name>
		<first_name>givenname</first_name>
		<email>mail</email>
		<phone>telephonenumber</phone>
		<mobile_phone>mobile</mobile_phone>
		<function>title</function>
		<employee_number>employeenumber</employee_number>
	</person_fields>
	<person_defaults>
		<!--  Default values for iTop Person's object fields -->
		<org_id>Demo</org_id>
		<status>active</status>
	</person_defaults>

	<!-- Parameters for User synchronization -->
	<ldapuserfilter>(&amp;(objectClass=person)(mail=*))</ldapuserfilter>
	<synchronize_profiles>no</synchronize_profiles>
	<user_fields>
		<!--  Mapping between LDAP fields and iTop UserLDAP's object fields -->
		<primary_key>samaccountname</primary_key>
		<login>samaccountname</login>
		<contactid>mail</contactid>
	</user_fields>
	<user_defaults>
		<!--  Default values for iTop UserLDAP's object fields -->
		<profile>Portal user</profile>
		<language>EN US</language>
	</user_defaults>

	<!-- Class collection sequence -->
	<collectors_launch_sequence type="array">
		<!-- Persons -->
		<collector>
			<name>iTopPersonLDAPCollector</name>
			<enable>yes</enable>
			<rank>1</rank>
		</collector>
		<!-- Users -->
		<collector>
			<name>iTopUserLDAPCollector</name>
			<enable>yes</enable>
			<rank>2</rank>
		</collector>
	</collectors_launch_sequence>

	<!-- Synchronization parameters -->
	<contact_to_notify></contact_to_notify>
	<synchro_user></synchro_user>
	<!--
		Set a non empty (and unique) prefix if you run several instances of the collector against the same iTop Server
		This is the recommended method to collect data from several LDAP servers. (assign a unique prefix to each "source" LDAP server)
		Note: prefix is defined here since json_placeholders (below) can only reference global parameters
	-->
	<prefix></prefix>
	<json_placeholders>
		<itopperson_synchro_name>$prefix$Synchro LDAP Person</itopperson_synchro_name>
		<persons_data_table>synchro_data_$prefix$ldap_persons</persons_data_table>
		<itopuser_synchro_name>$prefix$Synchro Users from LDAP</itopuser_synchro_name>
		<users_target_class>UserLDAP</users_target_class>
		<users_data_table>synchro_data_$prefix$ldap_users</users_data_table>
		<synchro_status>production</synchro_status>
		<full_load_interval>0</full_load_interval><!-- 7 days (in seconds): 7*24*60*60 -->
		<!-- Following policies may be: master_locked, master_unlocked or write_if_empty
	        . Use master_locked if you manage the profiles directly in LDAP and let the collector synchronize them in iTop
	        . Use master_unlock if you don't want the list of profiles to be synchronized
			. write_if_empty if you want the collector to initialize the profiles for each account but let you edit them in iTop after the initial creation of the user
		    -->
	    <profile_list_update_policy>write_if_empty</profile_list_update_policy>
	</json_placeholders>
	<!-- Date format for LDAP collector -->
	<date_format>Y-m-d</date_format>
</parameters>

