Re: Replicating Lotus Domino Master LDAP Server with OPENLDAP Slave server

["Kervin L. Pierre" <kervin@blueprint-tech.com>]

For {other LDAP server}->OpenLDAP sych., try psearch.  I'd bet domino
supports "persistant search control" or some variation of psearch.  A
client does a persistant search ( maybe using Java and JNDI ), and can
pass on changes over to OpenLDAP.  Therefore you wouldn't have to poll
Dominoe.  This would probably work with any LDAP server implementing some
sought of psearch control, eg. Active Directory, iPlanet.

For OpenLDAP->{other LDAP server}.  "ldap" backend and "meta" backend??  I
haven't used those, but that's what they're here for I think.

For OpenLDAP->{any other datastore} synchronization, you can use an
OpenLDAP replica configured with back perl.  This replica is configured
for back perl only and serves as a gateway to the other datastore.  I use
this to sync OpenLDAP users with Win2K users for instance.

--Kervin


> Domino doesn't "send updates" the same way that OpenLDAP does.  I think
> that the  best bet to get this working would be to write an interface
> program that would act  like a Domino server doing a replication
> request.  This "interface" could talk to  Domino like another server
> and discover the new records the Domino way and then  reformat and then
> pass those updates to the OpenLDAP slave in a format that  OpenLDAP
> likes.  You can find more information about the Domino API from the
> Lotus site.
>
> Another way would be to periodically query the Domino server for all
> records and  then determine which ones of those don't appear in the
> OpenLDAP version.  Then  just apply those that are needed.  Although I
> couldn't do it, this should be something  that could be done fairly
> easily with Perl.  You could run this process as often as  necessary.
>
> How up to date does your information have to be?  How fast does it
> change?   Depending upon your situation, it might even be acceptable to
> reload all data into  your OpenLDAP machine from Domino once per day or
> so.  Although not the most  elegant, it should work for some and
> obviously is the simplest.  On the other hand, if  you need it to be
> more up to date, then you might have to do something more  complex.
>
> If you get this working reliably, please report back to the list.  I
> know that there are  others would be interested.
>
> Allan.
>
> On 3 Jun 2002 at 10:04, Michael Fuller wrote:
>
>> We are running a Lotus Domino Mail server with LDAP services which is
>> searchable with MS Outlook Express. I want to use openldap on Red Hat
>> 7.3 as a slave LDAP server to replicate this information. How do I
>> acheive this ? Any help would be greatly appreciated.