[Date Prev][Date Next] [Chronological] [Thread] [Top]

openldap back-sock



Hi,
I have a question about a special LDAP setup , I try to use sock backend for bind user that after succesfull bind have to search on another backend, 

Here my slapd.conf on openldap 2.4.11

access to * by users read
##################BACKEND SOCK#################################################
database sock
suffix "dc=reg-bus-users-local,dc=it"
#catturo le richieste riscritte da rwm bloccando richieste di lettura e scrittura dirette
socketpath /tmp/ldapauthorization.sock


#######################################################################
# ldbm and/or bdb database definitions
#######################################################################
database bdb
suffix "dc=tfk,dc=tfkdatastore"
rootdn "cn=Root,dc=tfk,dc=tfkdatastore"
rootpw          xxxxx

I also made a fake bind in server listening on socket ldapauthorization.sock

if ($request eq "BIND\n") {
my %req = ();

      print "RESULT\n";
print "code: 0\n";
print "matched: cn=fratbrother,dc=reg-bus-users-local,dc=it\n";
}

my ldapsearch is :
ldapsearch -H ldap://localhost:389/ -D "cn=fratbrother,dc=reg-bus-users-local,dc=it" -w xxxx -x -b "dc=tfk,dc=tfkdatastore" "(objectClass=*)" "*"

result :

ldap_bind: Insufficient access (50)

my goal if work , is to make bind = (bind + search attribute) in other ldap server  check the validity of attribute and then response bind succesfull,
so redirected bind with check on remote attribute , is possible to do that ? is the right usage of backend sock ?

Ps : also noted that ldap does not connect to socket but make response directly "insufficient access".
Ps : sorry for the bad english

Thanks in Advance
Stefano Vitali