https://bugs.openldap.org/show_bug.cgi?id=9950

Issue ID: 9950 Summary: Need example configuration backend-sock Product: OpenLDAP Version: 2.4.57 Hardware: x86_64 OS: Linux Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: backends Assignee: bugs@openldap.org Reporter: earyutin@gmail.com Target Milestone: ---

Hi all !

I set up two backends on different ports, one is a proxy for MS AD, and the second is a backend shell. I want to update to the latest version of OpenLDAP, but there is no backend shell support in the next versions. I can't find any documentation or examples that I could rely on to set up a backend for backend sock.

Added the following to the files:

port 389 include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/inetorgperson.schema

modulepath /usr/lib/ldap moduleload back_ldap.la moduleload rwm.la

pidfile /var/run/slapd/slapd.pid argsfile /var/run/slapd/slapd.args

database ldap readonly yes protocol-version 3 rebind-as-user yes uri "ldap://ldap.test.com" suffix "dc=test,dc=com" overlay rwm

rwm-map attribute uid sAMAccountName rwm-map attribute mail proxyAddresses

rebind-as-user yes

access to attrs=userPassword by self write by anonymous auth by * none

access to * by self write by * none

port 9000 modulepath /usr/lib/ldap moduleload back_sock.la moduleload back_sock

database sock suffix "dc=test,dc=com" socketpath /tmp/slapd.sock

Next, I don't know where to go.

Could you demonstrate a working example of running and processing scripts based on the backend-sock?

I need to launch my own script that would check the second factor (should check for the presence of a certain attribute in the Active Directors directory and then skip or not skip authorization based on a given condition).

Help me figure it out please..

Thank you !