[Date Prev][Date Next] [Chronological] [Thread] [Top]

Dealing Active Directory Schema for OpenLDAP



Hi,

 

I’m working on synchronizing an AD catalog to an OpenLDAP one, using LDIF …

 

For the first test I only synch OUs with only a few standard attributes … and worked OK. Now I’m trying to synch all the data exactly as it is in the AD, so I’m looking for an AD schema definition …

 

I found some answers in http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/schema/?hideattic=1&sortbydate=0 but I had problems with this … there are classes def before attributes def …

 

Then I made my own schema solution with a VB script using ADSI, and I continue having problems … now more specific … something like: Syntax not found: "1.2.840.113556.1.4.907"

 

The error is in the first occurrence of SYNTAX "1.2.840.113556.1.4.907", of course, here I put all the occurrences … and then the script I used to create the schema file …

 

I WILL APPRECIATE A LOT SOME HELP !!! I’m doing a very important work and unfortunaly I have to deal with M$ schema … Thanks for those who read this ;-)

 

Robert.

 

###############################################################################################

 

[root@linux scripts]# cat /usr/local/etc/openldap/schema/uclv.schema | grep 1.2.840.113556.1.4.907

 

attributetype ( 1.2.840.113556.1.4.7000.102.80 NAME 'msExchMailboxSecurityDescriptor' SYNTAX '1.2.840.113556.1.4.907' SINGLE-VALUE )

 

attributetype ( 1.2.840.113556.1.4.1335 NAME 'pKIEnrollmentAccess' SYNTAX '1.2.840.113556.1.4.907' )

 

attributetype ( 1.2.840.113556.1.2.281 NAME 'nTSecurityDescriptor' SYNTAX '1.2.840.113556.1.4.907' SINGLE-VALUE )

 

attributetype ( 1.2.840.113556.1.4.7000.102.50035 NAME 'msExchPFDefaultAdminACL' SYNTAX '1.2.840.113556.1.4.907' SINGLE-VALUE )

 

attributetype ( 1.2.840.113556.1.4.5060 NAME 'msExchSubmitRelaySD' SYNTAX '1.2.840.113556.1.4.907' SINGLE-VALUE )

 

attributetype ( 1.2.840.113556.1.4.535 NAME 'fRSRootSecurity' SYNTAX '1.2.840.113556.1.4.907' SINGLE-VALUE )

 

attributetype ( 1.2.840.113556.1.4.7000.102.5057 NAME 'msExchLogonACL' SYNTAX '1.2.840.113556.1.4.907' SINGLE-VALUE )

 

 

‘----------------------------- this is the VBScript using ADSI to extract schema def. from subSchemaSubEntry in AD ----------------

 

Option Explicit

 

Dim fso, txtfile

Set fso = CreateObject("Scripting.FileSystemObject")

Set txtfile = fso.CreateTextFile("myAD.schema", True, False)

 

wscript.echo "Starting ..."

 

Dim schema

Set schema = GetObject("LDAP://CN=Aggregate,CN=Schema,CN=Configuration,DC=uclv,DC=edu,DC=cu")

 

Dim entry

 

txtfile.WriteLine "# -- attributeTypes"

For Each entry In schema.attributeTypes

            txtfile.WriteLine "attributetype " & entry

            txtfile.WriteLine

Next    

txtfile.WriteLine  "# --"

 

txtfile.WriteLine "# -- extendedAttributeInfo"

For Each entry In schema.extendedAttributeInfo

            txtfile.WriteLine "extendedAttributeInfo " & entry

            txtfile.WriteLine

Next    

txtfile.WriteLine  "# --"

 

txtfile.WriteLine "# -- objectClasses"

For Each entry In schema.objectClasses

            txtfile.WriteLine "objectclass " & entry

            txtfile.WriteLine

Next    

txtfile.WriteLine  "# --"

 

txtfile.WriteLine "# -- extendedClassInfo"

For Each entry In schema.extendedClassInfo

            txtfile.WriteLine "extendedClassInfo " & entry

            txtfile.WriteLine

Next    

txtfile.WriteLine  "# --"

 

txtfile.WriteLine "# -- dITContentRules"

For Each entry In schema.dITContentRules

            txtfile.WriteLine "dITContentRule " & entry

            txtfile.WriteLine

Next    

txtfile.WriteLine  "# --"

 

 

txtfile.Close

 

wscript.echo "The End"