Re: slapd.conf for proxy to AD

2011-02-15 Thread Andrew Findlay
On Wed, Feb 09, 2011 at 01:20:22AM -0800, Howard Chu wrote: Buchan Milne wrote: On Wednesday, 9 February 2011 01:13:38 masar...@aero.polimi.it wrote: Please note that you're asking OpenLDAP's slapd to bridge the gap between two broken pieces of code Very likely, and we are fortunate to have

Re: slapd.conf for proxy to AD

2011-02-09 Thread Pierangelo Masarati
Buchan Milne wrote: On Wednesday, 9 February 2011 01:13:38 masar...@aero.polimi.it wrote: As far as I recall, what you need is not possible. You can: - have authenticated users proxied with their identity asserted, or - all users, including unauthenticated ones auth'd as a fixed identity

Re: slapd.conf for proxy to AD

2011-02-09 Thread Howard Chu
Buchan Milne wrote: On Wednesday, 9 February 2011 01:13:38 masar...@aero.polimi.it wrote: As far as I recall, what you need is not possible. You can: - have authenticated users proxied with their identity asserted, or - all users, including unauthenticated ones auth'd as a fixed identity

slapd.conf for proxy to AD

2011-02-08 Thread Del
Hi, Like a lot of people I guess, I'm having trouble configuring slapd to work as a proxy server in front of Microsoft's Active Directory. AD in this case is configured to refuse to allow anonymous searches but I want to allow anonymous searches on the proxy. Therefore the configuration

Re: slapd.conf for proxy to AD

2011-02-08 Thread Del
Just to elaborate on some of my own points below: Like a lot of people I guess, I'm having trouble configuring slapd to work as a proxy server in front of Microsoft's Active Directory. AD in this case is configured to refuse to allow anonymous searches but I want to allow anonymous searches on

Re: slapd.conf for proxy to AD

2011-02-08 Thread Buchan Milne
On Wednesday, 9 February 2011 01:13:38 masar...@aero.polimi.it wrote: As far as I recall, what you need is not possible. You can: - have authenticated users proxied with their identity asserted, or - all users, including unauthenticated ones auth'd as a fixed identity but not both.