Re: Duplicate dynamically an OU with another RDN ?

To: Dan White <dwhite@olp.net>

Subject: Re: Duplicate dynamically an OU with another RDN ?

From: Sylvain <debian.roxx@gmail.com>

Date: Fri, 2 May 2014 10:37:35 +0200

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=f3ErK17QxMTw9jPIo5Aav8ZIJZS/2OCc1BEmvMrQBJ0=; b=Bcd7lnfJvZxo47qmK92KzsxD/b4BrXh4EIFONkLRIk3CDQoA+WnXMDT23rKEu1WuJ1 ewJviJdXs7bC+XAu2UuYJVH13wiS2Zllm06v6LTXcSDg77uJcSuNk2rb5TO8AeidkWQ6 KFUv1kPnPFOP8u6SYIHDc9a6ZLZM8req2J6c34Qf1JkCpWM2fq6n0qsrgrA2j2mnR1LE nWOc/7j7PiYUItf+/l9N3l87W/4BvRrHaeRX36FSHswq/h4sHyDnUmR2ZF9tkK1fqWDU KHhef8pfh1GJLf3b4znxcDlrYBQ0Gw/T6rgOyfjV4AIQ6MIoCFIKQPhTKDFCA7fbwFVS 2mLg==

In-reply-to: <20140429133219.GA6174@dan.olp.net>

References: <CALhNj+R2hz+CY5CX+kaLSHS=xyLgQmqXkUyRspEnkmsfm+MAUQ@mail.gmail.com> <20140429133219.GA6174@dan.olp.net>

I didn't know rwm overlay, it sounds very cool, I'll try next week, many thanks :)

Sylvain

2014-04-29 15:32 GMT+02:00 Dan White <dwhite@olp.net>:

On 04/29/14Â14:57Â+0200, Sylvain wrote:

Hi !

I have a branch "ou=people" where RDN are in the form "X1234" and NEVER
change for one people.
Ex. : uid=X1234,ou=people,dc=example,dc=org

In this node, I have the login under "eduPersonPrincipalName" attribute
which MAY change.

Some applications doesn't allow us to define which login to use and so take
"uid" attribute by default, not so cool.

Is there any possibility in OpenLDAP to duplicate dynamically an OU with
another RDN to have for example :
uid=sylvain,ou=peoplebis,dc=example,dc=org ?

The rwm overlay should handle this. Point your broken applications to a
unique suffix (e.g. dc=example,dc=org,dc=brokenapps), which overwrites the
incoming DN to use eduPersonPrincipalName instead of uid. See slapo-rwm(5).

--
Dan White