Re: [SSSD-users] feasibility using ldap only with AD
On Wed, Apr 30, 2014 at 09:11:20AM +0200, Geerten Schram wrote:
Hi,
I'm trying to set up a ldap proxy in front of an Active Directory and
configure sssd on the end point using AD schema, but so far I'm not very
succesfull and now I wonder if it is feasible at all.
My first attempt is trying to use sssd directly to AD with these
settings:
ldap_schema=ad
id_provider = ldap
auth_provider = ldap
to no avail. I can join the AD domain and then it works. So is this
possible at all?
Regards,
Geerten Schram
In general, I think this should be possible, because the AD provider is
a 'wrapper' around the LDAP ID provider and Kerberos AUTH provider for
the biggest part.
I'm afraid there is not enough information in your e-mail, though..
What exactly doesn't work getting user information or authentication? Can
you paste the logs?
Does the LDAP proxy have the same schema as AD uses, same attribute
names etc?
Does the LDAP proxy allow anonymous bind? Can you search it with
ldapsearch?