Hi!
Sorry! I've forgotten something:
A user should have the possibility, to bind to server 'A' and make a
search on all the information located on both servers without chasing
referrals.
His UserDN should be converted to that of server 'B' and he should be
authenticated with the credentials given by the user for server 'A'
(plaintext authentication).
Of course that's not possible...
Correct. I guess we could design a sort of proxy auth
also for back meta, which allows mapping users between
targets and propagates auth (where available).
p.