Re: LDAP Question

This is a little bit off topic, but before asking the question as it's own
topic, I'll try here since it seems like it's in the same area.

We have a Win 2003 Active Directory. Our Linux guys want synhronize out
AD-atabase to their OpenLDAP server. I know I think it's a bad idea since we
only need one LDAP database but it's better than keeping their completely own
database.

I've found ways to do it by creating LDIF-files. But what about the
passwords. Are they impossible to extract/get to the OpenLDAP? I know you can
use MIIS but that's a bit pricy.



"Joe Richards [MVP]" wrote:

> If you are asking, will AD use the OpenLDAP users and passwords, the answer is
> no. AD uses kerberos for auth, not LDAP. LDAP is a not an authentication
> protocol, it just gets hacked into being used for it.
>
> You will need to sync the info from OpenLDAP to AD. You may want to look into
> making AD your primary store and then using AD/AM for any LDAP app needs that
> you use OpenLDAP for since you won't have to worry about syncing passwords/IDs then.
>
> joe
>
> --
> Joe Richards Microsoft MVP Windows Server Directory Services
> www.joeware.net
>
>
> rick wrote:
> > I have an OpenLdap Server were all my account creation, passwords.... is
> > kept. We are in the process of setting up a windows domain so we can manage
> > updates, machines.. easier. My question that I have is, is the LDAP server
> > still going to be able to be were all the accounts... are created, and were
> > everyone gets authenicated back to when logging in to the domain? Thanks
>
.

Relevant Pages

  • Re: FreeBSD 7.0, Open LDAP, PAM, TLS and NSS, howto?
    ... Obviously, this did not work (again: I already installed successfully OpenLDAP, nss_ldap and pam_ldap!). ... The problem at the moment is, when nss_ldap running, login as root on console takes several minutes. ... When logged in on console, I can do a simple slapcatand get a lot of definitions, so tis shows a running and resping OpenLDAP server. ... Other tutorials around the web targetting mostly outdated environments (FreeBSD 5.1, older OpenLDAP versions or strange Linux setups). ...
    (freebsd-questions)
  • Re: FreeBSD 7.0, Open LDAP, PAM, TLS and NSS, howto?
    ... OpenLDAP is openldap-server-2.3.38, standard config, no SASL support or anything else apart from default ... # nsswitch.conf- name service switch configuration file ... passwd: files ldap ... I have a problem with setting up an FreeBSD box as OpenLDAP server with several services, like SAMBA, NFS. ...
    (freebsd-questions)
  • Re: FreeBSD 7.0, Open LDAP, PAM, TLS and NSS, howto?
    ... OpenLDAP is openldap-server-2.3.38, standard config, no SASL support or anything else apart from default ... # nsswitch.conf- name service switch configuration file ... passwd: files ldap ... I have a problem with setting up an FreeBSD box as OpenLDAP server with several services, like SAMBA, NFS. ...
    (freebsd-questions)
  • Re: openLDAP question
    ... >unanswered questions, but I will start with one. ... "/etc/openldap/ldap.conf" is the OpenLDAP server configuration file, ... whereas "/etc/ldap.conf" is read by processes that want to use LDAP, ... I would just install the OpenLDAP server RPMs, ...
    (Fedora)
  • openldap, pam_ldap and nss_ldap
    ... I am having difficulties setting up openldap user authentication using ... (but he was using the native sun ldap clients) ... # with Netscape Directory Server) ... # Netscape SDK SSL options ...
    (SunManagers)