Re: OpenLDAP and AD integration

[Michael Ströder <michael@stroeder.com>]

Santosh Balan wrote:
> 
> I am newbee to this community and want to know how I can integrate an
> OpenLdap Server with MS Active Directory. Such that I create a user in
> LDAP it reflects in AD as well and vice-a-versa. Similarly any changes
> should effect on both AD and LDAP. Also I want to know how this can be
> done with a technical documentation.

This is not possible just by OpenLDAP and AD server configuration. You
need a custom sync process for that. There might be already some
implementations available but most times they won't fit exactly your
requirements. So I'd recommend to write your own custom script to do it.

> Also a user incase AD is not available gets authenticated using LDAP
> and vice-a-versa.

Authenticated at which client component?

E.g. it does not make sense to authenticate the user during Windows
logon directly against the OpenLDAP user account since there's a bit
more done during a Windows domain logon.

> Your urgent help on this issue will be highly appreciated. Expecting a
> reply from you at the earliest.

Well, "urgent" and "expecting a reply" is a little bit demanding on a
mailing list where volunteers are answering in their spare time. You
might wanna hire a consultancy company: http://www.openldap.org/support/

Ciao, Michael.