[TriLUG] OpenLDAP Question

Robert Dale robdale at gmail.com
Wed Aug 3 15:22:37 EDT 2011


Some ldap servers can serve views, like database table views, but I
don't know if OpenLDAP can do that.  There's a virtual directory
called Penrose which lets you create a view and proxy requests.
http://penrose.redhat.com/display/PENROSE


On Wed, Aug 3, 2011 at 3:08 PM, Jonathan Woodbury <jonathan at mybox.org> wrote:
> I should qualify my response because I remember hearing noise about this
> from my local OpenLDAP guy.  But I did actually ask him just now if this is
> right and he thinks it is.
>
> Yes!  I think this should be possible.  See the ldap backend type in the
> slapd.conf to setup the proxy part of what you want.  And then see the docs
> on overlays: http://www.openldap.org/doc/admin24/overlays.html for making
> the changes you want this client to see.
>
> Jonathan
>
> On Wed, Aug 3, 2011 at 11:40 AM, David Brain <dbrain at gmail.com> wrote:
>
>> Hi,
>>
>> Slightly off topic - but thought this might be as good a place to ask
>> this as any..
>>
>> Is it possible to set up a proxy OpenLDAP server that serves a 'view'
>> of it's backend server's data based on an LDAP filter?  I'm trying to
>> get a reluctant network device to auth through LDAP, and all would be
>> well if it could just use a filter, however as it's a closed system
>> it's just not possible, so my first thought for a solution is to run a
>> proxy LDAP server that 'pre-filters' the data.
>>
>> Any thoughts or alternate solutions welcomed...
>>
>> David.
>> --
>> This message was sent to: Jonathan Woodbury <jonathan at mybox.org>
>> To unsubscribe, send a blank message to trilug-leave at trilug.org from that
>> address.
>> TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
>> Unsubscribe or edit options on the web  :
>> http://www.trilug.org/mailman/options/trilug/jonathan%40mybox.org
>> TriLUG FAQ          :
>> http://www.trilug.org/wiki/Frequently_Asked_Questions
>>
> --
> This message was sent to: Robert Dale <robdale at gmail.com>
> To unsubscribe, send a blank message to trilug-leave at trilug.org from that address.
> TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
> Unsubscribe or edit options on the web  : http://www.trilug.org/mailman/options/trilug/robdale%40gmail.com
> TriLUG FAQ          : http://www.trilug.org/wiki/Frequently_Asked_Questions
>



-- 
Robert Dale



More information about the TriLUG mailing list