Re: Using back-meta or back-relay plus slapo-rwm as a proxy to a local database

2010-05-19 Thread Ryan Steele
masar...@aero.polimi.it wrote: Ok, fair warning - this is a little long-winded, but I'd rather give too much detail than not enough. Also, all examples are in slapd.conf format, since there is no documentation for cn=config, and I'm using slapd with -f and -F to make the conversion.

Re: Using back-meta or back-relay plus slapo-rwm as a proxy to a local database

2010-05-19 Thread Ryan Steele
masar...@aero.polimi.it wrote: masar...@aero.polimi.it wrote: In this case, dscl (Mac OS X's directory services client) expects a UID, not a DN, as is the POSIX standard for group members, and doesn't know how to parse usernames in groups that use DN's to identify their members. Instead,

Re: Using back-meta or back-relay plus slapo-rwm as a proxy to a local database

2010-05-19 Thread Ryan Steele
masar...@aero.polimi.it wrote: masar...@aero.polimi.it wrote: masar...@aero.polimi.it wrote: No, I know the difference. What I'm saying is that the OS X clients aren't translating DN-valued LDAP group membership attributes to UID-valued POSIX group memberships. On Linux, this is done

Using back-meta or back-relay plus slapo-rwm as a proxy to a local database

2010-05-17 Thread Ryan Steele
Ok, fair warning - this is a little long-winded, but I'd rather give too much detail than not enough. Also, all examples are in slapd.conf format, since there is no documentation for cn=config, and I'm using slapd with -f and -F to make the conversion. Anyways, I'm working on implementing

Re: Using back-meta or back-relay plus slapo-rwm as a proxy to a local database

2010-05-17 Thread masarati
Ok, fair warning - this is a little long-winded, but I'd rather give too much detail than not enough. Also, all examples are in slapd.conf format, since there is no documentation for cn=config, and I'm using slapd with -f and -F to make the conversion. Anyways, I'm working on implementing

Re: Using back-meta or back-relay plus slapo-rwm as a proxy to a local database

2010-05-17 Thread masarati
masar...@aero.polimi.it wrote: Ok, fair warning - this is a little long-winded, but I'd rather give too much detail than not enough. Also, all examples are in slapd.conf format, since there is no documentation for cn=config, and I'm using slapd with -f and -F to make the conversion.

Re: Using back-meta or back-relay plus slapo-rwm as a proxy to a local database

2010-05-17 Thread masarati
masar...@aero.polimi.it wrote: masar...@aero.polimi.it wrote: In this case, dscl (Mac OS X's directory services client) expects a UID, not a DN, as is the POSIX standard for group members, and doesn't know how to parse usernames in groups that use DN's to identify their members.