Embedding Other LDAP Server in OpenLDAP for User Authentification [Virus checked]

Hello,

I've a tricky problem to solve. We are working with OpenLDAP 2.2.30. To improve the end user comfort we like to configure a special behavior of our LDAP.

The authentification-request which our LDAP gets should first forwarded to an other LDAP server (primary LDAP). Just if the authentification failed on the primary LDAP server our LDAP should try to authentificate by himself.

Background: The primary LDAP server is very inflexible. We just can use it for user authentification. For authorization we have to use our good old own LDAP ;-)

Has anyone a clue how I've to configure our OpenLDAP ?

Every hint is welcome.

Thanks in advance,

Klaus