Re: LDAP and MS Exchange

[David J N Begley <david@avarice.nepean.uws.edu.au>]

On Tue, 27 Jul 1999, Steve Lewis wrote:

> We're seriously thinking of implementing LDAP, for all the usual reasons.  A
> potential stumbling block, though, is achieving connectivity of the Exchange
> servers to the LDAP server, either by importing of data or by direct
> connection.

Does Exchange support LDAP referral objects?  That could perhaps be used to
fulfil the "direct connection" option.  Until LDUP is standardised and adopted
by vendors, there isn't a cross-vendor way of replicating parts of a DIT
between LDAP vendors (easily).

As for the importing of data, you'd first need to look at the schemata used by
Exchange and ensure you can fill any necessary fields.  "ldapsearch" is your
friend.

Query Root DSE:

  ldapsearch -h <ldap-v3-server> -L -b "" -s base "objectclass=*"

Query subschemaSubentry:

  ldapsearch -h <ldap-v3-server> -L -b "<subschema>" -s base "objectclass=*"

Where:

  <ldap-v3-server>  IP address or host name of LDAPv3 server (doesn't work
                    with LDAPv2 servers, like OpenLDAP 1.x).
  <subschema>       See the "subschemaSubentry" attribute in the Root DSE
                    query output.

Tested with the commands included in the Netscape Directory SDK 3.0 for C;
using OpenLDAP 1.2.1 commands produces "varying" results (depending on LDAP
server).

Cheers..


dave