Re: Importing entries from AD to OpenLDAP

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

You should be able to import (after appropriate configuration)
LDIF representing objects using standard LDAP/X.500 schemas.
I do not recall any 'objectCategory' attribute in the LDAP/X.500
standards, hence you will need to consult Microsoft documentation
and/or Microsoft support forums and/or other Microsoft support
resources to determine how to map MS-specific schemas to
standardized schemas.

Kurt


At 05:43 PM 11/23/2004, Ali Safdar Kureishy wrote:
>Hi,
>
>I looked through the archives but didn't find any recent post about
>importing directory entries from AD into OpenLDAP so thought I'd post
>a message.
>
>One solution would be to specify a list of attribute mappings and
>apply these mappings to convert an LDIF export from AD into an LDIF
>that can be imported into OpenLDAP. However, there might be some
>complications. Specifically, I feel it might be complicated to resolve
>the different "classes" of objects in AD into equivalent OpenLDAP
>object classes since AD uses an "objectCategory" attribute in addition
>to an "objectClass" attribute (as in OpenLDAP). Therefore the mapping
>file may need to be more complicated than a simple attribute mapping.
>
>My question therefore is, are there any cheap/free tools out there
>that already do this type of transfer, or are there any alternatives?
>If not, is there already a default mapping specification that exists
>between the two?
>
>Thanks in advance! :)
>
>Safdar