[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Question about OpenLDAP and rwm overlay

To: "Vandenburgh, Steve Y" <Steve.Vandenburgh@centurylink.com>
Subject: Re: Question about OpenLDAP and rwm overlay
From: Ondřej Kuzník <ondra@mistotebe.net>
Date: Fri, 17 Jan 2020 11:25:04 +0100
Cc: Michael Ströder <michael@stroeder.com>, "openldap-technical@openldap.org" <openldap-technical@openldap.org>
Content-disposition: inline
In-reply-to: <CY4PR0201MB3427BE5F79A2904524708689F4350@CY4PR0201MB3427.namprd02.prod.outlook.com>
References: <BN7PR02MB3938806E548A066A7C8E24DAF4640@BN7PR02MB3938.namprd02.prod.outlook.com> <20191026202739.4a2cfed3@pink.fritz.box> <EC89FCC762466F6DF7F62D2D@[192.168.1.144]> <BN7PR02MB3938DF22E38CC952A12A777CF4660@BN7PR02MB3938.namprd02.prod.outlook.com> <87zhhkr9qn.fsf@pink.fritz.box> <BN7PR02MB39383AEECCFC4CBD002A8140F4610@BN7PR02MB3938.namprd02.prod.outlook.com> <3bc4dd00-b5ce-57aa-46af-83df25f37c77@stroeder.com> <CY4PR0201MB3427BE5F79A2904524708689F4350@CY4PR0201MB3427.namprd02.prod.outlook.com>
User-agent: Mutt/1.10.1 (2018-07-13)

On Mon, Jan 13, 2020 at 10:20:07PM +0000, Vandenburgh, Steve Y wrote:
> Michael,
> 
> I know this thread is old, but wanted to follow up by asking: would it
> be possible to delay the BIND DN syntax check until after rwm
> manipulations are completed?  Unfortunately, there is a lot of client
> software that is dependent on this quirk but it would be very
> beneficial to be able to use OpenLDAP as a proxy to AD.  I suspect
> that delaying the syntax check until after rwm manipulations would
> allow UPN-based authentication to work.

Hi Steve,
DN validation for binds/search bases/... happens way too early in the
frontend for this to be possible. Same reason why you can't write a
slapd module to handle the magic '<GUID=...>' AD DNs.

Regards,

-- 
Ondřej Kuzník
Senior Software Engineer
Symas Corporation                       http://www.symas.com
Packaged, certified, and supported LDAP solutions powered by OpenLDAP

References:
- RE: Question about OpenLDAP and rwm overlay
  - From: "Vandenburgh, Steve Y" <Steve.Vandenburgh@centurylink.com>

Prev by Date: Re: two slapd processes accessing one MDB env
Next by Date: Re: direct MDB access for counting entries from Python
Index(es):
- Chronological
- Thread