LDAP Sync TODO list

Dev-cut:

• create LDAPInterface for Active Directory schema (@deads2k) https://github.com/openshift/origin/pull/4972
• install OpenLDAP client on Jenkins so that our sync jobs can mutate LDAP at will with bash calls (@deads2k) https://github.com/openshift/vagrant-openshift/pull/336
• create LDAPInterface for enhanced AD schema (FTF) https://github.com/openshift/origin/pull/5086
• union name mapper (some defined by users, others by rule) (FTF) @deads2k https://github.com/openshift/origin/pull/5100
• extended test for: union name mapper (FTF) @deads2k https://github.com/openshift/origin/pull/5100
• extended test for: pin OpenShift Group name for LDAP sync - sync OpenShift group to same UID (don't change LDAPUID annotation if LDAP group changes) (@deads2k) https://github.com/openshift/origin/pull/5108
• blacklist {OpenShift,LDAP} groups from sync (@deads2k) https://github.com/openshift/origin/pull/5108

• add ldap entries for other schema to image (@stevekuznetsov) https://github.com/openshift/origin/pull/4923
• add memberof overlay to openldap image (@stevekuznetsov) https://github.com/openshift/openldap/pull/10
• add test schema to openldap image (@stevekuznetsov) https://github.com/openshift/openldap/pull/11
• extended test for: whitelist defined in {file,paramters} from {OpenShift,LDAP} (@stevekuznetsov) https://github.com/openshift/origin/pull/5047
• extended test for: user-defined mapping from LDAP UID to OpenShift UID (@stevekuznetsov) https://github.com/openshift/origin/pull/5047
• documentation for {rfc2307,ad,augmented-ad} exposed config (@stevekuznetsov) https://github.com/openshift/openshift-docs/pull/1066
• add a label to the sync job for the host (@stevekuznetsov) https://github.com/openshift/origin/pull/5101

Post dev-cut:

• remove Ginkgo tests, clean up authentication.sh (@stevekuznetsov) https://github.com/openshift/origin/pull/5110
• add sane readiness check to LDAP server pod https://github.com/openshift/origin/pull/5064
• clean up help text (@stevekuznetsov) https://github.com/openshift/origin/pull/5099
• delete orphaned groups from OpenShift records (--prune) (@stevekuznetsov /FTF) https://github.com/openshift/origin/pull/5145
• extended test for: delete orphaned groups (determine orphanage from OpenShift records) (@stevekuznetsov /FTF) https://github.com/openshift/origin/pull/5145
• bash autocompletion for sync-groups (@stevekuznetsov) https://github.com/openshift/origin/pull/5174
• use internal git server to push current branch so that we can use updated files on extended tests (@stevekuznetsov)
• change valid*.txt --> valid*.yaml (@stevekuznetsov)
• allow OpenLDAP image to support upgrate to TLS (@stevekuznetsov)
• extended test for: secured LDAP (@stevekuznetsov)
• pretty-print sync config validation results (@stevekuznetsov)
• handle nested groups by flattening (@stevekuznetsov) documenting (@enj)
• Better LDAP failover handling RFE per https://github.com/openshift/origin/issues/4851#issuecomment-343955928 denied per https://bugzilla.redhat.com/show_bug.cgi?id=1459046

Choose one of the unchecked tasks, then inspect the referenced sync-groups entry points, authentication.sh, valid*.yaml files, or OpenLDAP image setup. Confirm the relevant extended test or validation path before starting; done means the selected task is implemented and its LDAP sync or test coverage passes.