Re: Exchange work with LDAP

From: Rich Matheisen [MVP] (richnews_at_rmcons.com.NOSPAM.COM)
Date: 02/06/05


Date: Sun, 06 Feb 2005 12:03:38 -0500

Norman Zhang <norm@realbox.com> wrote:

>Rich Matheisen [MVP] wrote:
>> Postfix (for example) uses the OpenLDAP libraries, but that doesn't
>> mean it couldn't use something else.
>
>Do you mean AD and OpenLDAP are integrable?

LDAP is LDAP. It's a protocol, not a schema definition. If the LDAP
libraries don't ask the directory service about the schema and the
properties of the classes and objects, but just assume that they have
some predefined sturcture, that's not the fault of the directory
service.

>I just need basic features
>like username, password, and email address (global address book) to
>share between Exchange 2003 and Postfix. Is that workable?

I'd be asking this in one of the open source newsgroups, not here. An
LDAP query should be the same no matter what's at the other end -- if
the query's constructed the right way and the software asking the
question is capable of understanding the information returned.

Simple queries shouldn't present much of a problem, but queries for
group information might cause you problems. Authentication should be
workable too, but probably not without work.

You might find it easier to run an OpenLDAP server and just dump the
stuff from the AD into it periodically. Or you can invest in a
directory synchronization software.

-- 
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm


Relevant Pages