I've had this issue a number of times. Our in-house automation is intended to be run in real-time, so waiting for a scheduled LDAP sync isn't usually reasonable. There is no API call exposed for this, but you can simulate the button push if you have the PKID of the directory you want to sync.
Below is a POC I cooked up in Python3:
import requests
from bs4 import BeautifulSoup
if __name__ == '__main__':
adminuser = 'sampleadmin'
adminpass = 'samplepassword'
hostname = 'cuchost.yourdomain.local'
LDAPpkid = 'abcdef12-abcd-abcd-abcd-abcd123456789'
with requests.Session() as session: # Create a Session
# Log in
session.post(f"https://{hostname}/cuadmin/j_security_check", f"j_username={adminuser}&j_password={adminpass}", headers={"User-Agent": "Mozilla/5.0", "content-type": "application/x-www-form-urlencoded"}, verify=False)
# Get the edit form for the associated LDAP Directory
html_text = session.get(f"https://{hostname}/cuadmin/directoryEdit.do?key={LDAPpkid}", headers={"User-Agent": "Mozilla/5.0"}, verify=False).content
# Use BeautifulSoup to extract the form data into a dictionary
soup = BeautifulSoup(html_text, features="html.parser")
data = {e['name']: e.get('value', '') for e in soup.find_all('input', {'name': True})}
# Strip out all the unneeded fields
keysAll = list(data)
keysKeep = (
'struts.token.name',
'token',
'pkid',
'name',
'interval',
'syncNow'
)
for key in keysAll:
if key not in keysKeep:
data.pop(key, None)
# Override the fields required to initiate a Sync
data['syncNow'] = 1
data['groupsyncronize'] = 1
data['interval'] = 1
data['unit'] = 2
# Issue the command (simulate the button push)
session.post(f"https://{hostname}/cuadmin/directorySave.do", data, headers={"User-Agent": "Mozilla/5.0"}, verify=False)
# Clean up
session.cookies.clear()
session.cookies.keys()
