ldapenforcer
is a program that reads config files containing users and groups,
and creates and modifies LDAP objects to match the config files.
It’s idempotent and can be run repeatedly to ensure the server is always properly configured.
Idempotent management of users and groups in LDAP