Re: Help me for " LDAP Sync Replication with Active Directory from Openl

Re: Help me for " LDAP Sync Replication with Active Directory from Openldap side"

To: Howard Chu <hyc@symas.com>

Subject: Re: Help me for " LDAP Sync Replication with Active Directory from Openldap side"

From: Ludovic Poitou <ludovic.poitou@gmail.com>

Date: Sun, 24 Mar 2013 14:30:01 +0100

Cc: devzero2000 <pinto.elia@gmail.com>, Suman Karki <sumankarki16@gmail.com>, openldap-technical@openldap.org

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:date:from:to:cc:message-id:in-reply-to:references :subject:x-mailer:mime-version:content-type; bh=P01OMJBMYXsNEFMFMeMV5SaxH2opDTnify8Ss1i+7x8=; b=Tkm3sQDS2PC8AB+1Ja6zZ4v0ddHhJl92a/nS045MiquPBGzYr1tqFyofkxvaPl9zjR 8iO+OeM6xmm/Lp1Vdogu7L+i/GwuSQeVgbPRRahGrOrqFudBm6otNO8X3wfD1ydR0o16 c6fOLCkfWglMVzmLKW5Dco8NNyLd0+K7SXLnEXyN29VskynhpjI2+1SOQ/WTO6mooweM SUKmQkWUtKJqizzQph5GwB94woYC6U2Dd6DFHY1TGa+vVzTw3K9u09b9LzRp5/0L3lzE WJCPYhz07v+hMucZc++oPfvhuy2LO8I3zJlkiFb0276VTVSS736CivFp2qw3X0ArB+fZ Z94A==

In-reply-to: <514EFB77.70700@symas.com>

References: <CAJw6rJ6CviTif47Y5_zhGvRNf0jj0yhz7xuBAF_EwPN86PkTiA@mail.gmail.com> <CAJw6rJ5SGGcmhVtLqcJBKw0spFQ9C4zg9vsCDF_jU81jDpq6bg@mail.gmail.com> <CAH5b-BV0cYy-a68gP9mgQhkYvVT8zo5xrtWo_Lk7r1LwNpCkuQ@mail.gmail.com> <514EFB77.70700@symas.com>

On Sunday, March 24, 2013 at 14:11 , Howard Chu wrote:

devzero2000 wrote:

Sorry for the top posting

no, it is not possible to do what you are trying to do, not so simply.
There are solution for synch different ldap product, free and
commercial. In a very old oreilly ldap book the topic is also
discussed somehow, iirc. In effect the ietf effort to create an
multiple vendor ldap synch repl standard is failed, in retrospect, i
think.

The IETF succeeded, and RFC4533 is the result. Currently OpenLDAP and Apache

Directory support it, I'm not aware of anyone else.

I wouldn't say that IETF succeeded. RFC4533 is an experimental document and in no way represents a consensus on how to do LDAP synchronization or replication.

Regards,

Ludovic.

Ludovic Poitou

http://ludopoitou.wordpress.com

Best

2013/3/24, Suman Karki <sumankarki16@gmail.com>:
I any person is willing to help me and require more detail about this
problem i will reply that.

On 3/24/13, Suman Karki <sumankarki16@gmail.com> wrote:
I am running open ldap server in redhat server, and active directory
in win server 2008.
I have admin access to both servers.

The thing is that i have to sync both server, like from openldap i
could access active directory data.

Can it be possible?
If possible then then please give me some information that i could
proceed this task.

I have tried some thing like using openldap admin guide

syncrepl rid=001
provider=ldap://IP of AD server/
binddn="cn=replicator,dc=suretecsystems,dc=com"
bindmethod=simple
credentials=Password of AD server
searchbase="dc=suretecsystems,dc=com"
type=refreshAndPersist
retry="5 5 300 5"

I don't how much i am right.
Or is there any different way? Please help me to solve this.

-- Howard Chu

CTO, Symas Corp. http://www.symas.com

Director, Highland Sun http://highlandsun.com/hyc/

Chief Architect, OpenLDAP http://www.openldap.org/project/