Aug 5, 2024: iRedMail-1.7.1 has been released.

**alex42** · 2015-09-30 13:46:35

alex42
Member
Offline

Registered: 2013-08-26
Posts: 147

Topic: Edit group entries of large amount of users (LDAP)

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.0
- Linux/BSD distribution name and version: Ubuntu 14.04 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? No
- Related log if you're reporting an issue:
====

I've set up an email server using iRedMail on our schools server. Importing the users with the create_mail_user_OpenLDAP.py skript worked flawless. I've added the users into different goups (students, teachers). It would be great if it would be possible to add a large amount of users to subgroups (for example classes). But as typical in schools users are often changing groups/classes/courses and so on.
Is there an easy way to add a large group of existing users to groups and to move them from one group to another?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

**ZhangHuangbin** · 2015-09-30 13:52:55

ZhangHuangbin
iRedMail Developers
Offline

Registered: 2009-05-06
Posts: 31,165

Re: Edit group entries of large amount of users (LDAP)

alex42 wrote:

It would be great if it would be possible to add a large amount of users to subgroups (for example classes).

What do you mean sub-groups? User can be assigned to multiple groups, for example, assign one user to group "students", "grade_2", "course_abc", etc. is it enough for you?

alex42 wrote:

Is there an easy way to add a large group of existing users to groups and to move them from one group to another?

We don't have such script (in iRedMail) or feature (in iRedAdmin-Pro), but it's a good idea. I will give it a try NOW, could you help test it?

**alex42** · 2015-09-30 14:13:46

alex42
Member
Offline

Registered: 2013-08-26
Posts: 147

Re: Edit group entries of large amount of users (LDAP)

ZhangHuangbin wrote:

alex42 wrote:
It would be great if it would be possible to add a large amount of users to subgroups (for example classes).
What do you mean sub-groups? User can be assigned to multiple groups, for example, assign one user to group "students", "grade_2", "course_abc", etc. is it enough for you?

Yes thats what I meant.

ZhangHuangbin wrote:

alex42 wrote:
Is there an easy way to add a large group of existing users to groups and to move them from one group to another?
We don't have such script (in iRedMail) or feature (in iRedAdmin-Pro), but it's a good idea. I will give it a try NOW, could you help test it?

Would be really great to have such a script!

**ZhangHuangbin** · 2015-09-30 14:36:13

ZhangHuangbin
iRedMail Developers
Offline

Registered: 2009-05-06
Posts: 31,165

Re: Edit group entries of large amount of users (LDAP)

alex42 wrote:

Yes thats what I meant.

As mentioned in our document, this is supported:
http://www.iredmail.org/docs/ldap.bulk. … users.html

Sample: assign user to 2 groups: group1, group2.

mydomain.com, user1, plain_password, John Smith, 104857600, group1:group2

alex42 wrote:

Would be really great to have such a script!

Finished. I will do some basic test on my local machine and come back to you later. Stay tuned.

**ZhangHuangbin** · 2015-09-30 15:00:05

ZhangHuangbin
iRedMail Developers
Offline

Registered: 2009-05-06
Posts: 31,165

Re: Edit group entries of large amount of users (LDAP)

Try this new script:

*) Download this file:
https://bitbucket.org/zhb/iredmail/raw/ … r_group.py

*) Edit this file and set correct LDAP server address, LDAP suffix, bind dn and password.
*) Run it without arguments will give you help message:

Usage:

$ python ldap_move_members_to_another_group.py [options] old_group@domain.com [new_group@domain.com new_group_2@domain.com ...]

If no new group specified, this script will remove all members (just remove
membership, not remove mail accounts) of old group.

Available optional options:

    --copy Assign members of old group to new groups without removing
           membership of old group. That means user will be member of both
           old and new groups.
           If not --copy specified, user will be not member of old group.

**alex42** · 2015-10-01 02:33:13

alex42
Member
Offline

Registered: 2013-08-26
Posts: 147

Re: Edit group entries of large amount of users (LDAP)

Wow, cool!
For my use case it would be better if I could use a user list within I could define new groups for chosen user. For example:

user1@example.com; group1, group2, group3
user2@example.com; group3
user3@example.com; group2

Is it possible for you to realize this as well?

**ZhangHuangbin** · 2015-10-01 11:00:34

ZhangHuangbin
iRedMail Developers
Offline

Registered: 2009-05-06
Posts: 31,165

Re: Edit group entries of large amount of users (LDAP)

New script for this purpose.

*) Download this file:
https://bitbucket.org/zhb/iredmail/raw/ … _groups.py

*) Edit this file and set correct LDAP server address, LDAP suffix, bind dn and password.
*) Run it without arguments will give you help message:

Usage:

$ python ldap_assign_user_to_groups.py [options] user@domain.com new_group@domain.com [new_group_2@domain.com ...]

Note: Non-existing group will be ignored.

Optional arguments:

    --remove Remove memberships. If no mailing list specified, it will remove
             ALL assigned mailing lists.

Samples:

*) Remove all memberships:
    python ldap_assign_user_to_groups.py --remove user@domain.com

*) Remove memberships of specified mailing lists:
    python ldap_assign_user_to_groups.py --remove user@domain.com group1@domain.com group2@domain.com

*) Assign user to new mailing lists:
    python ldap_assign_user_to_groups.py user@domain.com group1@domain.com group2@domain.com

**alex42** · 2015-10-15 05:05:11

alex42
Member
Offline

Registered: 2013-08-26
Posts: 147

Re: Edit group entries of large amount of users (LDAP)

The script is working great! Thanks a lot for this!

Using the script I've discovered a bug (or isn't it a bug). I've added the users using the create_mail_user_OpenLDAP.py script. When I'm having a look in the user entry I can see the defined memberOfGroup entries. But under groups these groups don't appear, so I can't add users to them using your new script.

**alex42** · 2015-10-15 06:03:46

alex42
Member
Offline

Registered: 2013-08-26
Posts: 147

Re: Edit group entries of large amount of users (LDAP)

Wrote a little Script ot add large amounts of users to groups

{ while IFS=';' read  u1 g1 ; do    python ldap_assign_user_to_groups.py "$u1" "$g1"
 done ; } < groupadd.csv

My groupadd.csv contains entries like these:

user1@example.com;group1@example.com
user2@example.com;group1@example.com

**ZhangHuangbin** · 2015-10-15 13:34:22

ZhangHuangbin
iRedMail Developers
Offline

Registered: 2009-05-06
Posts: 31,165

Re: Edit group entries of large amount of users (LDAP)

With create_mail_user_OpenLDAP.py, you'd better create these mail groups first. if they don't exist, the script will create the membership without problem, but you need to create the mail groups.

**alex42** · 2015-10-15 13:53:22

alex42
Member
Offline

Registered: 2013-08-26
Posts: 147

Re: Edit group entries of large amount of users (LDAP)

Is it possible to make the groups (created with create_mail_user_OpenLDAP.py) visible in the LDAP tree under groups in Phpldapadmin? Can I just create them again with Phpldapadmin?

**ZhangHuangbin** · 2015-10-15 20:49:33

ZhangHuangbin
iRedMail Developers
Offline

Registered: 2009-05-06
Posts: 31,165

Re: Edit group entries of large amount of users (LDAP)

Sorry, no plan for this. Of course you're free to do it yourself.

**alex42** · 2015-10-16 01:05:59

alex42
Member
Offline

Registered: 2013-08-26
Posts: 147

Re: Edit group entries of large amount of users (LDAP)

Your scripts are already great. But would be really great if you could add the ability to create groups out of the second script or maybe a third script which creates groups?

Today I had to add manually more than hundred groups in phpldapadmin and sadly I haven't got the ability to write such a script :-(

Aug 5, 2024: iRedMail-1.7.1 has been released.

Edit group entries of large amount of users (LDAP)

Posts: 13

1 Topic by alex42 2015-09-30 13:46:35

Topic: Edit group entries of large amount of users (LDAP)

2 Reply by ZhangHuangbin 2015-09-30 13:52:55

Re: Edit group entries of large amount of users (LDAP)

3 Reply by alex42 2015-09-30 14:13:46

Re: Edit group entries of large amount of users (LDAP)

4 Reply by ZhangHuangbin 2015-09-30 14:36:13

Re: Edit group entries of large amount of users (LDAP)

5 Reply by ZhangHuangbin 2015-09-30 15:00:05

Re: Edit group entries of large amount of users (LDAP)

6 Reply by alex42 2015-10-01 02:33:13

Re: Edit group entries of large amount of users (LDAP)

7 Reply by ZhangHuangbin 2015-10-01 11:00:34

Re: Edit group entries of large amount of users (LDAP)

8 Reply by alex42 2015-10-15 05:05:11

Re: Edit group entries of large amount of users (LDAP)

9 Reply by alex42 2015-10-15 06:03:46 (edited by alex42 2015-10-15 06:08:45)

Re: Edit group entries of large amount of users (LDAP)

10 Reply by ZhangHuangbin 2015-10-15 13:34:22

Re: Edit group entries of large amount of users (LDAP)

11 Reply by alex42 2015-10-15 13:53:22

Re: Edit group entries of large amount of users (LDAP)

12 Reply by ZhangHuangbin 2015-10-15 20:49:33

Re: Edit group entries of large amount of users (LDAP)

13 Reply by alex42 2015-10-16 01:05:59 (edited by alex42 2015-10-16 01:44:13)

Re: Edit group entries of large amount of users (LDAP)

Posts: 13