Help needed for Openldap > Active directory slave/proxy setup.

[Marco van Putten <marco.vanputten@tudelft.nl>]

Hi all,

We want to setup a Openldap server which is a slave to our Active 
directory. The ldap server only has to do replication of the necessary 
records to act as a address book for non Exchange users.

Further more the authentication has to be done against the users in the 
Active directory.

I found some guides/examples to set up the authentication part. But none 
of them seems to do want we want because it requires to have the user in 
your Openldap server with a special "userPassword {SASL}user@domain.com" 
entry. But we want the openldap database to only contain contact 
information and not username/password information.

Does anybody know how to set up such a thing and can give me some 
hints/guides/recipes on how to do this?


Thanks,
Marco.
--
M. (Marco) van Putten
TU Delft / Shared Service Centre ICT
Marco.vanPutten@tudelft.nl