Hi all,<br>
<br>
I&#39;m trying to setup a ldap server with openldap 2.3 and I need some lights about how to do it.<br>I explain:<br>My company already have a central ldap server (openldap 2.2) on which I can find all users and authenticate them, but the corresponding attributes (homedir, shell, gidnumber) aren&#39;t relevant for my department. My problem is that I want to use the central ldap serveur for authentification purpose and store locally the other datas.
<br>Yeah, it seems easy to solve using the rwm overlay and a ldap backend, but it isn&#39;t, because the users are located on different OUs on the remote ldap server.<br>So there is the relevant part of my slapd.conf, which works great for the first user unit :
<br>
<br>
####################################<br>
overlay&nbsp;&nbsp;&nbsp; rwm<br>
<br>
rwm-rewriteEngine&nbsp;&nbsp;&nbsp;&nbsp; on<br>
rwm-rewriteContext&nbsp;&nbsp;&nbsp; bindDN<br><br># path to the remote users :&nbsp;&nbsp;&nbsp; ou=&quot;unit_number&quot;,ou=people,dc=example,dc=com<br># path to the local users :&nbsp;&nbsp;&nbsp; cn=users,dc=local,dc=example,dc=com<br>rwm-rewriteRule&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;^uid=([^,]+),cn=users,dc=local,dc=example,dc=com$&quot;&nbsp; &quot;uid=$1,ou=unit_1,ou=people,dc=example,dc=com&quot;&nbsp; &quot;:@&quot;
<br>
<br>
# Database for remote Authentification<br>
database&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ldap<br>
suffix&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;ou=people,dc=example,dc=com&quot;<br>
uri&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;ldap://remote-<a href="http://ldap.example.com:389/">ldap.example.com:389/</a>&quot;<br>
restrict&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; read write extended<br>
<br>
# Local Database<br>
database&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bdb<br>
suffix&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;dc=local,dc=example,dc=com&quot;<br>
####################################<br>
<br>I tried to complete my setup by adding a line like :<br>&nbsp;&nbsp;&nbsp;&nbsp; uri &quot;ldap://remote-<a href="http://ldap.example.com:389/ou=people,dc=example,dc=com??sub?(&amp;(objectClass=posixAccount)(uid=$1))">ldap.example.com:389/ou=people,dc=example,dc=com??sub?(&amp;(objectClass=posixAccount)(uid=$1))
</a>&quot;<br>but the ldap backend isn&#39;t designed to do that ^^<br><br>So, is there a way to work around it ?<br><br>Thanks for your help,<br>Frava.<br><br>