OPENLDAP as a proxy of other ldap









up vote
0
down vote

favorite












I don't know if it's possible or not.
In our compagny we have a main ldap who contain all employees.
I wanted to custom it but it's no possible.



So the idea is to create an new ldap based on Openldap.



Is an openldap can act as a proxy for the main ldap for users
(user/password are stored in the main ldap compagny) and group would be defined inside it. Groups will contain users from the main ldap.
Do you think it's possible and how ?






proxy ldap openldap







share|improve this question

























    up vote
    0
    down vote

    favorite












    I don't know if it's possible or not.
    In our compagny we have a main ldap who contain all employees.
    I wanted to custom it but it's no possible.



    So the idea is to create an new ldap based on Openldap.



    Is an openldap can act as a proxy for the main ldap for users
    (user/password are stored in the main ldap compagny) and group would be defined inside it. Groups will contain users from the main ldap.
    Do you think it's possible and how ?






    proxy ldap openldap







    share|improve this question























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      I don't know if it's possible or not.
      In our compagny we have a main ldap who contain all employees.
      I wanted to custom it but it's no possible.



      So the idea is to create an new ldap based on Openldap.



      Is an openldap can act as a proxy for the main ldap for users
      (user/password are stored in the main ldap compagny) and group would be defined inside it. Groups will contain users from the main ldap.
      Do you think it's possible and how ?






      proxy ldap openldap







      share|improve this question













      I don't know if it's possible or not.
      In our compagny we have a main ldap who contain all employees.
      I wanted to custom it but it's no possible.



      So the idea is to create an new ldap based on Openldap.



      Is an openldap can act as a proxy for the main ldap for users
      (user/password are stored in the main ldap compagny) and group would be defined inside it. Groups will contain users from the main ldap.
      Do you think it's possible and how ?






      proxy ldap openldap




      proxy ldap openldap






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Nov 10 at 13:15









      user3876986

      3117




      3117






















          1 Answer
          1






          active

          oldest

          votes

















          up vote
          0
          down vote













          There are a number of ways to accomplish this, but configuring the OpenLDAP server as a translucent proxy and overriding/adding attributes from the other LDAP server seems like the most straight-forward approach.






          share|improve this answer




















            Your Answer






            StackExchange.ifUsing("editor", function ()
            StackExchange.using("externalEditor", function ()
            StackExchange.using("snippets", function ()
            StackExchange.snippets.init();
            );
            );
            , "code-snippets");

            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "1"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader:
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            ,
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );













             

            draft saved


            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53239314%2fopenldap-as-a-proxy-of-other-ldap%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes








            up vote
            0
            down vote













            There are a number of ways to accomplish this, but configuring the OpenLDAP server as a translucent proxy and overriding/adding attributes from the other LDAP server seems like the most straight-forward approach.






            share|improve this answer
























              up vote
              0
              down vote













              There are a number of ways to accomplish this, but configuring the OpenLDAP server as a translucent proxy and overriding/adding attributes from the other LDAP server seems like the most straight-forward approach.






              share|improve this answer






















                up vote
                0
                down vote










                up vote
                0
                down vote









                There are a number of ways to accomplish this, but configuring the OpenLDAP server as a translucent proxy and overriding/adding attributes from the other LDAP server seems like the most straight-forward approach.






                share|improve this answer












                There are a number of ways to accomplish this, but configuring the OpenLDAP server as a translucent proxy and overriding/adding attributes from the other LDAP server seems like the most straight-forward approach.







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered Nov 11 at 16:42









                LisaJ

                44616




                44616



























                     

                    draft saved


                    draft discarded















































                     


                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53239314%2fopenldap-as-a-proxy-of-other-ldap%23new-answer', 'question_page');

                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    -

                    這個網誌中的熱門文章

                    How to read a connectionString WITH PROVIDER in .NET Core?

                    圖片
                    6 I added .AddJsonFile("Connections.json", optional: true, reloadOnChange: true) in public Startup(IHostingEnvironment env) Connections.json contains: "ConnectionStrings": "DefaultConnection": "Server=(localdb)\mssqllocaldb;Database=DATABASE;Trusted_Connection=True;MultipleActiveResultSets=true", "COR-W81-101": "Data Source=DATASOURCE;Initial Catalog=P61_CAFM_Basic;User Id=USERID;Password=PASSWORD;Persist Security Info=False;MultipleActiveResultSets=False;Packet Size=4096;", "COR-W81-100": "Data Source=DATASOURCE;Initial Catalog=Post_PS;User Id=USERID;Password=PASSWORD;Persist Security Info=False;MultipleActiveResultSets=False;Packet Size=4096;", "MSEDGEWIN10": "Data Source=DATASOURCE; Initial Catalog=COR_Basic; Persist Security Info=False;Integrated Security=true;MultipleActiveResultSets=False;Packet Size=4096;Application Name="COR_Basic"", "server...
                    閱讀完整內容

                    Node.js Script on GitHub Pages or Amazon S3

                    圖片
                    0 I'm wondering if I can run a Node.js script in my Jekyll page from GitHub Pages or Amazon S3? I think it can't run on GitHub Pages since it doesn't support server side code. Not too sure. The code is below: var Airtable = require('airtable'); var base = new Airtable(apiKey: 'YOUR_API_KEY').base('appAnZVyYqusNPV5Q'); base('Invitee list').select( // Selecting the first 3 records in Complete list: maxRecords: 3, view: "Complete list" ).eachPage(function page(records, fetchNextPage) // This function (`page`) will get called for each page of records. records.forEach(function(record) console.log('Retrieved', record.get('Email')); ); // To fetch the next page of records, call `fetchNextPage`. // If there are more records, `page` will get called again. // If there are no more records, `done` will get called. fetchNextPage(); , function done(err) if (err) console.error(err); return; ); node.js ...
                    閱讀完整內容

                    Museum of Modern and Contemporary Art of Trento and Rovereto

                    圖片
                    Art museum in Rovereto TN, Italy Museum of Modern and Contemporary Art of Trento and Rovereto Museo d'arte moderna e contemporanea di Trento e Rovereto MART, Entrance Location Corso Angelo Bettini, 43, 38068 Rovereto TN, Italy Coordinates 45°53′38″N 11°02′42″E  /  45.8940°N 11.0450°E  / 45.8940; 11.0450 Coordinates: 45°53′38″N 11°02′42″E  /  45.8940°N 11.0450°E  / 45.8940; 11.0450 Type Art museum Director Gianfranco Maraniello Public transit access Trento train station. Taxis outside station. Website mart.trento.it The Museum of Modern and Contemporary Art of Trento and Rovereto (MART) ( Museo d'Arte Moderna e Contemporanea di Trento e Rovereto , in Italian) is a museum centre in the Italian province of Trento. The main site is in Rovereto, and contains mostly modern and contemporary artworks, including works from renowned Giorgio Morandi, Giorgio de...
                    閱讀完整內容