`univention-export-anonymized-ldap` should create an offline copy of the LDAP server. It will then anonymize the data with regards to user data like names, mail addresses, passwords, ... Use case is a file that could be used in test environments to analyze e.g. performance.
Added with version 7.0.0-2 YAML added in 00bf762023ef264b9d2cf32c268cd13703ee6d4e
QA: OK: code review OK: no user data in the output file OK: Script work
<https://errata.software-univention.de/#/?erratum=5.2x76>
The code is not in the UCS repository but in univention-system-info. usage: # univention-export-anonymized-ldap --help usage: univention-export-anonymized-ldap --i-understand univention-export-anonymized-ldap creates an offline copy of your LDAP server. It will then anonymize the data with regards to user data like names, mail addresses, passwords, ... Use case is a file that could be used in test environments to analyze e.g. performance. options: -h, --help show this help message and exit --i-understand This will create an (anonymized) copy of the complete LDAP database. I understand that this may take a while and that some data may not be completely anonymized based on my own layout (maybe I stored the name of a user in an extended attribute). I will have the chance to examine the file afterwards, though. -o OUTPUT, --output OUTPUT Output file name. If not set, a temporary file will be created. Example: # univention-export-anonymized-ldap --i-understand Exporting LDAP database... ... saved online data at /tmp/tmp361fegmn.ldif ... writing anonymized data to /tmp/tmpcpxtjbna.ldif We anonymized or removed what we considered worthy. Usernames, birthdays, mail adresses, etc. Please note that there may be remnants of technical data, e.g. server names, DNS data, etc. Also, maybe some user data that needed protection was saved in attributes we did not consider or we did not know of (objects can be extended by Apps, ...). Please check the file before sending somewhere: /tmp/tmpcpxtjbna.ldif ... and removed online data again /tmp/tmp361fegmn.ldif You have to use the anonymized file, the other one is removed.