Re: Minimal OpenLDAP server source

[Joe Flowers <flowers@social.chass.ncsu.edu>]

Gavin Henry wrote:
> > The problem is that in many cases, to replace existing systems, I need
> > to be able to intercept username and password credentials from an LDAP
> > client, create the local or network account dynamically, perhaps perform
> > some other setup functions, and then return a value LDAP return to the
> > LDAP client that the authentication was successful.
> >     
>
> So, as well as a normal bind, from say ldapsearch,  you need to do other
> things if the bind was correct?
>
> So how would you stop any user/pass binding and an account getting created?
>   


I can/will do the the authoritative authentication pieces via Kerberos 
or native calls into NDS or AD or other LDAP calls or etc.


>   
> > I need a good snippet of LDAP server code to get me started, preferably
> > in C.
> >     
>
> If all you are after is interception, I would advise writting an OpenLDAP
> Overlay that captures what you need and does the other things you want.
>
> Overlay are meant to be small and light, exactly what you need.
>
> This will be easier than pulling out code and will get OpenLDAP Overlays
> into your head, which is always very handy.
>   

Thanks Gavin. I'll look into Overlays then. Any experienced pointers 
where to look for example code?

Thanks again,

Joe