[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: AD-style AUX classes

On Sun, 2008-01-20 at 14:16 -0800, Quanah Gibson-Mount wrote:
> --On Monday, January 21, 2008 8:31 AM +1100 Andrew Bartlett 
> <abartlet@samba.org> wrote:
> > Trying to determine where AD diverges from the schema OpenLDAP uses is
> > not a task I've yet taken on.
> s/schema OpenLDAP uses/RFC definitions/
> :P
> That's one of the nightmares in dealing with AD.  Things like making cn 
> single valued causes no end to headaches.

One of the tasks I need to do is solve, to some extent, this headache.
I'm very interested to know of any existing mappings between AD's LDAP
and the RFC variety.  

Fedora DS has one, for it's AD sync plugin, but it only deals with
users, and in to many respects it just defines new elements rather than

Are there any others that you know of?  (or at least a table of the
classes that Microsoft didn't mess with).

I strongly suspect I won't ever get to the stage of being able to use
OpenLDAP's schema files, unless they are strictly broken up into files
that do and don't conflict with Microsoft (which is probably not an
OpenLDAP goal :-)

Andrew Bartlett

Andrew Bartlett
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.

Attachment: signature.asc
Description: This is a digitally signed message part