Re: Integrate Openldap and Windows Active Directory Server

To: Clément OUDOT <clem.oudot@gmail.com>

Subject: Re: Integrate Openldap and Windows Active Directory Server

From: Kaushal Shriyan <kaushalshriyan@gmail.com>

Date: Tue, 17 Nov 2015 10:54:16 +0000

Cc: "openldap-technical@openldap.org" <openldap-technical@openldap.org>

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-type; bh=SayqXzmckVTDhCzcwnwzNzWVV0ZbPjxT2we/duz1xTM=; b=XtHqkBZAin5/QltYUNNDnHw7XtCcKIH/5363CkaQSZ69VT44gmtxC5n+2cf20VfZjV eAwLUEi1p2J78ocjsVUzR9dGwRrJpZHRppE8G/KjS0dBkqBf+4b/X+smiKZ2QyLlG+xG /Bayezn05YFuLJ35X4qi0d5p3SVDp93VR3KQw8D5NLGbZMEZZCcX2V9Z3gKC9jfR6X8m L+RgARpRIRn0d/gYAwnYfXbw2u5pUdnBubf5NmE7F2N256vBbk/4gCArGAe6KKz9zaW5 Ltq6KSqy/I/9soBMk4I6h+JCh614m6DG66BDieapUbsNj++p2izfpxN3aLKmWwyZVbQS AUMg==

In-reply-to: <CAK_oV48HTAozrokKp_gCANm2dekgkVAbgYu=5fO0skGj2B5NfQ@mail.gmail.com>

References: <CAD7Ssm84-SY0uvySS+nRRH1P7e3zeX5cUZLZU_d4ZWuNpgyf9g@mail.gmail.com> <CAK_oV48HTAozrokKp_gCANm2dekgkVAbgYu=5fO0skGj2B5NfQ@mail.gmail.com>

Thanks a Lot Clement. I will go through it and ask questions here if i have any during setup.

Regards,

Kaushal

On Tue, 17 Nov 2015 at 16:17 Clément OUDOT <clem.oudot@gmail.com> wrote:

2015-11-16 13:45 GMT+01:00 Kaushal Shriyan <kaushalshriyan@gmail.com>:
Hi,

Is there a way to integrate Openldap ldap server with Windows Server Active Directory wherein AD will act as Authentication and Openldap will be setup for Authorization?

Any help will be highly appreciable.

Hi,

you can configure OpenLDAP to delegate authentication to AD, either trough GSSAPI, either with SASL passwords. For the last solution, see http://ltb-project.org/wiki/documentation/general/sasl_delegation

I also often synchronize OpenLDAP and AD thanks to LSC project, see http://lsc-project.org/wiki/documentation/tutorial/openldaptoactivedirectory

Clément.