[Date Prev][Date Next]
Re: OpenLDAP synchtonization with windows/Active Directory
"Razi Garbie" <firstname.lastname@example.org> writes:
> Hi everyone,
> I've spent countless of hours trying to figure out how to sync openLDAP with
> my currently running windows/active directory, however.. i cant find any
> information on how this is done.
> Im currently running windows/AD which authenticates ~20users all windows boxes
> (obviously), however.. all windows users have accounts on the linux machines i
> run and that makes administrative tasks a bit messy, hence i have to make
> account changes on two different domains.
> The ideal setup is to setup setup a OpenLDAP server that is synced with
> windows active directory, so that my users can authenticate against the linux
> domain using their windows passwords.
> (linux machines/-ldap clients) - > OpenLDAP <--SYNC --> Win/AD <- (windows
> Thats how i imagine the setup will look like.
> Has anyone ever done this?
I doubt it.
Ask Microsoft to implement RFC 4533.
But you might try OpenLDAP with configured back-ldap and probably a
caching proxy to connect to AD. Further readings: man slapd.conf(5),
man slapd-ldap(5), man slapo-pcache(5).
Dieter Klünter | Systemberatung
GPG Key ID:8EF7B6C6