Re: slapd-ldap as proxy to active directory

2012-01-04 Thread Liam Gretton
On 16/12/2011 15:14, Pierangelo Masarati wrote: On 12/16/2011 03:35 PM, Liam Gretton wrote: On my OpenLDAP AD proxy, as soon as slapd has started I do a trivial search for a 'cn' attribute for a known record. After that, it's possible to search on sAMAccountName or other attributes without any

Re: slapd-ldap as proxy to active directory

2012-01-04 Thread Aaron Richton
On Wed, 4 Jan 2012, Liam Gretton wrote: If you think there are (standard track) syntaxes that AD supports and OpenLDAP misses, feel free to file a request for enhancement using the ITS (http://www.openldap.org/its/). It certainly would be useful. What does 'standard track' mean? I have a

Re: slapd-ldap as proxy to active directory

2011-12-23 Thread Juan Miscaro
On 16 December 2011 10:14, Pierangelo Masarati masar...@aero.polimi.it wrote: - find out what operations your clients need to do (i.e. what attributes, e.g. sAMAccountName, in what filter types, e.g. equality, presence, etc. will be used by your clients) - define those attributes with

Re: slapd-ldap as proxy to active directory

2011-12-16 Thread Liam Gretton
On 15/12/2011 14:57, Juan Miscaro wrote: So do I need to get the actual schema from AD and try to import it or is there something more easily available? It doesn't seem like I'm doing something exotic here. Others must have confronted such a situation. Right? :) You'd think so. I've hit

Re: slapd-ldap as proxy to active directory

2011-12-16 Thread Pierangelo Masarati
On 12/16/2011 03:35 PM, Liam Gretton wrote: On 15/12/2011 14:57, Juan Miscaro wrote: So do I need to get the actual schema from AD and try to import it or is there something more easily available? It doesn't seem like I'm doing something exotic here. Others must have confronted such a

Re: slapd-ldap as proxy to active directory

2011-12-15 Thread Juan Miscaro
On 14 December 2011 22:30, Howard Chu h...@symas.com wrote: The passthru of unknown schema is just a hack. It will allow you to see some data but without actual schema definitions it can't do proper normalization, case matching, filter parsing, etc... Everything works better with actual

slapd-ldap as proxy to active directory

2011-12-14 Thread Juan Miscaro
Good day. I would like to use the slapd-ldap backend as a proxy to Active Directory (Windows Server 2008 R2). Firstly, AD can be queried directly: $ ldapsearch -LLL -D cn=John Doe,cn=users,dc=support,dc=com -w okay -H ldap://ad.support.com -b cn=users,dc=support,dc=com '(sAMAccountName=jdoe)'

Re: slapd-ldap as proxy to active directory

2011-12-14 Thread Quanah Gibson-Mount
--On Wednesday, December 14, 2011 3:40 PM -0500 Juan Miscaro jmisc...@gmail.com wrote: Good day. I would like to use the slapd-ldap backend as a proxy to Active Directory (Windows Server 2008 R2). Firstly, AD can be queried directly: Does your local OpenLDAP have a schema file that defines

Re: slapd-ldap as proxy to active directory

2011-12-14 Thread Juan Miscaro
On 14 December 2011 17:44, Quanah Gibson-Mount qua...@zimbra.com wrote: --On Wednesday, December 14, 2011 3:40 PM -0500 Juan Miscaro jmisc...@gmail.com wrote: I would like to use the slapd-ldap backend as a proxy to Active Directory (Windows Server 2008 R2). Firstly, AD can be queried

Re: slapd-ldap as proxy to active directory

2011-12-14 Thread Howard Chu
Juan Miscaro wrote: On 14 December 2011 17:44, Quanah Gibson-Mountqua...@zimbra.com wrote: --On Wednesday, December 14, 2011 3:40 PM -0500 Juan Miscaro jmisc...@gmail.com wrote: I would like to use the slapd-ldap backend as a proxy to Active Directory (Windows Server 2008 R2). Firstly, AD