On-site connector

A small program on a computer in your office, for what CLOR cannot reach from the internet.

What it does

Pulls punches from readers on the office network (Hikvision, Dahua, Suprema BioStar, any JSON API) and sends them to CLOR.
Reads each Hikvision and Dahua reader's clock and sets it when it is a minute or more out.
Posts payroll vouchers from CLOR straight into Tally over Tally's HTTP port.
Syncs people from Active Directory / LDAP into CLOR.

It only ever calls out — to CLOR over HTTPS, and to the devices on your network. Nothing needs to be opened on your router.

Install

Pick a computer in the office that stays on (Windows, Linux or macOS) and install Node.js 20 or newer from nodejs.org.
In CLOR: Attendance → System → Integrations → On-site connectors → Add a connector. Name it; tick Tally and/or directory sync if you need them. Copy the token — it is shown once.
Download the connector: https://api.clor.in/agent/v1/download (one file, clor-agent.cjs). Put it in a folder of its own.
In a terminal run as administrator (Windows) or with sudo (Linux):
```
node clor-agent.cjs --install --token clora_…
```
It registers itself to start at boot (Task Scheduler, systemd or launchd), keeps the token in clor-agent.json beside the file, and shows as online in CLOR within a minute.

To try it first without installing: node clor-agent.cjs --token clora_… --once. It updates itself when CLOR has a newer version; add --no-update to stop that.

Readers behind it

Add the reader under Attendance → Readers as Hikvision (ISAPI), Dahua, BioStar 2 or “Any software with a JSON API”, open it and choose the connector under “Reached through”. The address can then be the reader's own on your network, e.g. http://192.168.1.64.

Tally

On the connector set the Tally computer's host or IP, port (9000 by default) and the company name. In Tally: F1 → Settings → Connectivity → enable the HTTP server on that port, with the company open. Then Payroll → Pay runs → open a run → Books → “Send to Tally via …”. The result shows under the connector's Jobs. See Tally.

Active Directory / LDAP

Give the connector the directory address (ldaps://dc1.corp.local), a bind user and password, the search base and optionally a filter. Every hour it reads the users with an e-mail and adds the ones CLOR lacks (with no role until one is assigned), follows the directory's enabled/disabled flag, and — if you tick it — switches off people it added when they leave the directory. It never touches people added by hand. The bind password stays on CLOR encrypted and is given only to this connector.

If it stops

Reader health raises an alert when a connector has not checked in for the “offline after” minutes, naming how many readers sit behind it. Check that the computer is on and the service is running: systemctl status clor-agent on Linux; Task Scheduler → “CLOR connector” on Windows. Its log is clor-agent.log beside the file (macOS) or the service's journal.