[Fedora-directory-users] LDAP proxy

[Michal Rejda]

I tried to use http://tinyurl.com/culeft. But the database link doesn't work. I setup the database link to the Active Directory (and OpenLDAP). When I looked into Wireshark log, FDS send search request with controls:
	2.16.840.1.113730.3.4.2
	2.16.840.1.113730.3.4.12
And the AD server responded: Unavailable Critical Extension.

I tried to remove this two controls from Database Link Settings (in administration console) but it didn't help. The server didn't return the message above, but the administrative console show error dialog.

> Michal Rejda wrote:
> >
> > Hi all,
> >
> > I’m trying to setup proxy on FDS to another LDAP server (OpenLDAP and
> > Active Directory). I tried two ways, but none of these works:
> >
> > 1) New database link to LDAP server.
> >
> > - The remote LDAP server (OpenLDAP) returns: null. manageDSAit
> control
> > value not found
> >
> You might have to tweak the controls used by chaining - see
> http://tinyurl.com/culeft
> >
> > 2) Create multiple-master replication and setup other server as
> consumer.
> >
> > - But this show error: 255 Replication error acquiring replica:
> > unknown error.
> >
> Replication will only work to a SunDS, not to any other vendor.
> >
> > My question is: Is there way how to setup proxy to access another
> LDAP
> > server from Fedora DS? I know that is possible to use AD sync, but I
> > cannot install anything on the AD server. The second reason why I
> need
> > to setup proxy is to use data stored in LDAP server (OpenLDAP, Open
> > Direcoty Server and Active Directory) in one place. I need to update
> > them too. It is not necessary to synchronize passwords.
> >
> See also
> http://directory.fedoraproject.org/wiki/Howto:OpenldapIntegration
> >
> > Thank you for reply.
> >
> > Regards,
> >
> > Michal
> >