Re: back-relay

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

Can we rewrite the operation differently for different authzDNs?
(as I think I know the answer, you can take this more as a suggestion
than a question)

Kurt

At 02:55 PM 3/17/2004, Pierangelo Masarati wrote:
>Seems to work now, except that the functionality of the mandatory
>rewrite-remap overlay is still limited.  There's a nice spin-off, that
>makes it truly virtual: it doesn't have to point to a single real naming
>context database, it can resolve the real database on a per-operation
>basis, by appropriately crafting the rewrite rules.  As such, it can be
>used to create virtual views of combined databases.  E.g.:
>
>1) different real databases for different operations:
>rewrite bindDN from dc=virtual,dc=naming,dc=context
>to dc=bind,dc=naming,dc=context and searchBase to
>dc=search,dc=naming,dc=context
>
>2) different databases for different subtrees:
>"ou=Groups,dc=v,dc=n,dc=c" => "ou=Groups,dc=one,dc=r,dc=n,dc=c"
>"ou=Poeple,dc=v,dc=n,dc=c" => "ou=People,dc=another,dc=r,dc=n,dc=c"
>
>and so on.
>
>For details on the configuration, see back-relay/README
>Need to turn it into a slapd-relay(5) man page.
>
>Ando.
>
>-- 
>Pierangelo Masarati
>mailto:pierangelo.masarati@sys-net.it