Re: OpenLdap Proxy for testing network behaviour

To: Emily Backes <ebackes@symas.com>

Subject: Re: OpenLdap Proxy for testing network behaviour

From: Echedey Lorenzo <echedey@gmail.com>

Date: Thu, 26 May 2011 14:10:27 +0200

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=YP59AZfT9BFpMqfyS23dUw57gS7hMbdAxzb/8fkh04w=; b=IsQ3P58rwHGRht4/uMnqBuVoKw9+FB5wKMMrjTOM1+RkRDpEWCTKH+JGGq32eEk7jx q+MmBbJHVl6r8WPeFqNM8YOe1wiKxAWMD0mv+kjtpoVifit/fPuFf9c6uxeLynHWmvIO t6XzcZbX6lSUarkFPSWogYs9igf9giwwdrVqI=

Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=goYNz1steiwxz8cgEPxslNdXAP35mQTozm7ab0SAq8uHMNJR/yRP0Ef8/PEdVFsoMP yapnuBzo4nXdZYzhuMvPQBtrSxJmIPwWxuD9875c3I7i9+Wxv3/cIXh/udu4C9VZbUv9 ylR8yXjItHjz9le1Qilk4RcRUMGz513BD5vHo=

In-reply-to: <B00536B5-CC91-4567-A25E-8D0184EF7345@symas.com>

References: <BANLkTinx-2JMGp59dYY7EVR6pi4gdtichA@mail.gmail.com> <B00536B5-CC91-4567-A25E-8D0184EF7345@symas.com>

2011/5/26 Emily Backes <ebackes@symas.com>

> I need to simulate 3 OpenLdaps instances. I was thinking about using a proxy that could listen to 3 different ports and route all the packets to the the standard 389 in which OpenLdap is listening. The proxy should be capable of open/close these ports dinamically and also throw custom error codes.
>
> I would like someone to point me in the right direction to start working.

Why not just look at the -h option to slapd; this lets you listen on multiple LDAP URIs, each potentially on different interfaces or ports. For example:

slapd -h 'ldap://localhost:389/ ldap://0.0.0.0:1389/ ldap://10.1.2.3:2389/'

If you need different ports to behave with different logical trees, consider just running three slapd processes, each with their own pidfile, database dirs, config files, etc. Worst case you can probably use back-ldap, which is already the most featureful LDAP proxy available.

For custom error codes, see man slapo-retcode for information on retcode overlay.

Emily Backes
Symas - The LDAP Guys
ebackes@symas.com