Openldap for proxy AD

[wrm@cdtn.br]

Hi,
I´m with some troubles to do authentication in AD trough of Openldap.

Somebody managed to authenticate with AD password in Openldap Server?

I´m trying everything but don´t auth. I see all users but the password
don´t pass.


My slapd.conf like this :


#
include         /etc/openldap/schema/corba.schema
include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/duaconf.schema
include         /etc/openldap/schema/dyngroup.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/misc.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/openldap.schema
include         /etc/openldap/schema/ppolicy.schema
include         /etc/openldap/schema/collective.schema

#allow bind_v2

loglevel 256
#referral	ldap://root.openldap.org

pidfile		/var/run/openldap/slapd.pid
argsfile	/var/run/openldap/slapd.args

# Load dynamic backend modules:
modulepath      /usr/lib/openldap
#moduleload      back_bdb
moduleload accesslog.la
moduleload auditlog.la
moduleload ppolicy.la
moduleload rwm.la
moduleload back_ldap

TLSCACertificateFile /etc/pki/tls/certs/ca-bundle.crt
TLSCertificateFile /etc/pki/tls/certs/slapd.pem
TLSCertificateKeyFile /etc/pki/tls/certs/slapd.pem

#######################################################################

database	ldap
suffix "dc=foobar"
rootdn "cn=admin,dc=foobar"
###################################
rootpw			{SSHA}wXmTs2ANS4XwqqnzEVIqmc+i6VCUiD7I

database ldap
suffix dc=foobar,dc=com
#subordinate
rebind-as-user
uri     ldaps://srv-2003.foobar.com
idassert-bind   bindmethod=simple
binddn="cn=vmail,cn=users,dc=foobar,dc=com"
credentials=abc@123
mode=none
flags=non-prescriptive

idassert-authzFrom "dn.regex:.*"
#idassert-authzFrom "dn.exact:cn=admin,dc=foobar"
#
chase-referrals yes

require authc
#############################
###########password-hash {CLEARTEXT}
TLSCipherSuite HiGH:MEDIUM:+TLSv1:+SSLv2:+SSLv3
TLSVerifyClient allow
sasl-host localhost
sasl-secprops none

#########################################################################
database config
# all others attributes are readable to everybody

access to *
        by * read

lastmod off

overlay rwm
rwm-suffixmassage dc=foobar,dc=com
#rwm-normalize-mapped-attrs
rwm-map attribute uid       sAMAccountName
rwm-map attribute cn        name
#rwm-map attribute mail      userPrincipalName
rwm-map objectclass account


What is wrong?

Please help me.

Thanks.