Re: Use active directory to check password but keep all user data in LDA

Re: Use active directory to check password but keep all user data in LDAP

To: Mattias Segerdahl <mattias.segerdahl@jeppesen.com>

Subject: Re: Use active directory to check password but keep all user data in LDAP

From: ClÃment OUDOT <clem.oudot@gmail.com>

Date: Wed, 28 May 2014 13:49:11 +0200

Cc: "openldap-technical@openldap.org" <openldap-technical@openldap.org>

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=gYSuUZl4Veev+hVVlKfO4YDBcpm0SyfXKdp6ng8n5Po=; b=gF277POyMpcCiH142SFvvZ3ZXPB5kzndvEzmajF1Byka72xGmAmDH6fqAk5zPgqJn5 drwkKfCe0Y5zdw4JGqQouNq4ROFVFcPTPKCrlGEhFdSCWvAztXirdVvBRD8bYT47TwyX Ys1KxwPYDjb6eiVC4ymTsNzczbvtSxr3xoXMnZyevHLeZS74jOS5epKW+t48xO12+02o 3svq0qA6eiMv/f5k38uyS13tSI8lzvP+jPYkqmXLF4lwfP7zBx3Yy3GcVaMIcjE/ET2k XaecC8JBjcUdGaWXe2rzQfSjYjSme/Zq1G8fxiZaJhHaoO/33NL1hWLzTuUosQs8BdWs Z/lA==

In-reply-to: <CFAB85D9.59C6C%mattias.segerdahl@jeppesen.com>

References: <CFAB85D9.59C6C%mattias.segerdahl@jeppesen.com>

2014-05-28 12:23 GMT+02:00 Mattias Segerdahl <mattias.segerdahl@jeppesen.com>:

Hello,

I was wondering if it is possible to configure OpenLDAP 2.4 to only check the password validation with Active Directory and have the rest of the user attributes, such as mail, loginShell, homeDirectory, etc. come from OpenLDAP? Any pointers, guides, howtoâs or even âlet me google that for youâ are highly appreciated.

Hi,

one solution is to use SASL passtrough authentication: http://ltb-project.org/wiki/documentation/general/sasl_delegation

Of course, others solutions are fine too.

ClÃment.