[Date Prev][Date Next]
Re: Active directory and openldap
- To: Michel Lacle <firstname.lastname@example.org>, OpenLDAP-software@OpenLDAP.org
- Subject: Re: Active directory and openldap
- From: jehan procaccia <email@example.com>
- Date: Mon, 29 Sep 2003 18:17:37 +0200
- In-reply-to: <Pine.GSO.firstname.lastname@example.org>
- References: <Pine.GSO.email@example.com>
- User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030530
it's quite an old mail ..., but do you finally wrote this document on
changing password both in openldap and AD ? it is very interesting to us !
Michel Lacle wrote:
In fact we do have a perl script, and a dll that allow this to happen. I
will work on this document on the weekend to describe in detail who we
solve the password thing between Active Directory and OpenLDAP.
On Fri, 23 May 2003, Jehan PROCACCIA wrote:
Do you happen to have a sample source perl code to transform the
cleartext password to Unicode unicodePwd attribute for AD ?
Also as anyone implemented a protected connection "SASL/GSSAPI or TLS)
to bind to AD as a privileged user to make these changes" .
Howard Chu wrote:
Yes, it's feasible to set up an OpenLDAP master that uses slurpd to replicate
changes into AD. The one catch is that you must use cleartext passwords if
you want them to be replicated, and you must transform the UTF-8 userPassword
from OpenLDAP into the Unicode unicodePwd attribute during the replication.
Generally I use a bit of perl code to do this step. And of course, you must
use a protected connection (SASL/GSSAPI or TLS) to bind to AD as a privileged
user to make these changes.
-- Howard Chu
Chief Architect, Symas Corp. Director, Highland Sun
Symas: Premier OpenSource Development and Support
Jehan Procaccia | Ingenieur Systemes & Reseaux
Institut National des Telecommunications| Tel : +33 (0) 160764436
MCI, Moyens Communs Informatiques | Mail: Jehan.Procaccia@int-evry.fr
9 rue Charles Fourier 91011 Evry France | Fax : +33 (0) 160764321
Jehan Procaccia, Ingenieur Systemes & Reseaux
Institut National des Telecommunications, Tel : +33 (0) 160764436
MCI,Moyens Communs Informatiques, Mail: Jehan.Procaccia@int-evry.fr
9 rue Charles Fourier 91011 Evry France, Fax : +33 (0) 160764321