Re: openLDAP as proxy

[Buchan Milne <bgmilne@obsidian.co.za>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Aitzol Naberan Burgaña wrote:
| Hi again,
|
| I have compiled openLDAP 2.2 iwth --enable-ldap --enable-rewrite, and
this is my
| slapd.conf
| database     ldap
| sufix        "dc=my_domain,dc=com"
| uri          ldap://machine.com
| lastmod      off
| binddn       "cn=root,dc=my_domain,dc=com"
| bindpw       xxxxxxxx
| directory    /var/lib/ldap
|
| machine.com is running M$ Active Directory.
| now I can do ldapsearch -x -b "dc=my_domain,dc=com", I get a result,
but I can't
| understand this result.
| I get a lot of entryes, but all seems like machines. This is one entry:
|
| # m.root-servers.net, RootDNSServers, MicrosoftDNS, System, my_domain.com
| dn:
|
DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=my_domain,DC=com
| dc: m.root-servers.net
| distinguishedName:
DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=
|  System,DC=my_domain,DC=com
| objectClass: top
| objectClass: dnsNode
| name: m.root-servers.net
|
| I haven't get the users entryes. May I add some special schema or
something to
| "talk" with AD??

Maybe you need to search for some entries you want, ie use a filter like
"(objectclass=person)" or something? Otherwise, you will just get the
first entries the server finds (until you hit the size limit).

Regards,
Buchan

- --
Buchan Milne                      Senior Support Technician
Obsidian Systems                  http://www.obsidian.co.za
B.Eng                                RHCE (803004789010797)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFApJ5IrJK6UGDSBKcRAi2sAJwNUWfGbQlF8yqeHLBG906+dy2JuQCfZwDl
tbv0TkEpNaBH5IWiNuD6v7Y=
=GYpf
-----END PGP SIGNATURE-----