Configuring TeamCity to synchronize users and groups with OpenLDAP

Question

Is it possible to configure TeamCity to synchronize users and groups with OpenLDAP?

Answer

There are two known issues when synchronizing TeamCity users and groups with OpenLDAP:

1. LDAP groups synchronization with OpenLDAP
2. LDAP group membership synchronization with OpenLDAP

Once the synchronization is configured as described in the articles above, it should work correctly.

An example of working ldap-config.properties :

java.naming.provider.url=ldap://<...>:389/dc=<...>,dc=local
java.naming.security.principal=cn=<...>,ou=People,dc=<...>,dc=local
java.naming.security.credentials=<...>
teamcity.users.base=ou=People
teamcity.users.login.filter=(&(objectClass=posixAccount)(!(businessCategory=disabled))(uid=$capturedLogin$))
teamcity.users.username=uid
teamcity.options.users.synchronize=true
teamcity.users.filter=(&(objectClass=posixAccount)(!(businessCategory=disabled)))
teamcity.options.groups.synchronize=true
teamcity.groups.base=ou=Groups
teamcity.groups.filter=(CN=grp_teamcity_test)
teamcity.options.createUsers=true
teamcity.options.deleteUsers=true
teamcity.options.syncTimeout=60000
teamcity.groups.property.member=memberUid
teamcity.property.distinguishedName=uid
teamcity.users.property.memberId=uid
teamcity.users.property.displayName=CN
teamcity.users.property.email=mail
teamcity.groups.fetchOnlyMappedGroups=false 

This example filters out only one group to synchronize (teamcity.groups.filter=(CN=grp_teamcity_test)), and should be changed appropriately.