Re: OpenLDAP as Proxy

[Pierangelo Masarati <ando@sys-net.it>]

Christof Grigutsch wrote:

> Hello, I would like to furnish gladly OpenLDAP as Proxy.  The Proxy is to 
> announce itself with user and passport at a Windows-2003 server.  
> Unfortunately I do not find useful documentation in the Doku and otherwise in 
> the Web.  Possibly can someone help me here?  
>  
The only "stock" way of doing that is to use back-ldap as in OpenLDAP 
2.3 (which is currently in beta) and exploit the identity assertion 
feature described in <http://www.openldap.org/faq/data/cache/532.html>.  
Among the possible configurations, you can implement a proxy that in 
reaction to anonymous operations binds to a remote server with an 
administrative identity and does not perform any proxyAuthz; of course, 
the administrative identity should be pretty much unprivileged...  YMMV

Other solutions may require (extensive) coding.

p.

--
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it



   SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497