Hello,

Having some basic experience with OpenLDAP, things like overlays and non-db backends are new to me.

I'm trying to configure slapd in such a way that: - it proxies filtered user-accounts (objectClass=posixAccount) from Novell eDirectory (NDS). - stores some search and bind results locally like the pcache overlay. - But, unlike pcache, it only uses the locally stored ("cached") when The backend (Novell) server is down/unreachable.

I've been through the slapo-* and slapd-* man pages trying to find or contruct a solution. It is possible to do re-writes in the frontend, in order to direct bind requests to another backend-server than search-requests. But is it possible to stack overlays in such a way that a ldap-request goes to another server (or backend) on error or on timeout?

I am running

Hope it is clear what I am trying to achieve (and I hope there is some way). Thanks in advance for any help.

Below this mail is the slapd.conf I have so far, but it does nothing more than proxying a subtree from the Novell eDirectory server, while mapping some selected attributes. (it configures for simple binds and clear text passwords, but this is only for testing)

Regards,

Heiko Noordhof

~~~~~~~ slap.conf ~~~~~~~

# slapd.conf - Minimal

# Global Options # include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/inetorgperson.schema

loglevel 256 pidfile /var/run/slapd/slapd.pid argsfile /var/run/slapd/slapd.args

modulepath /usr/lib/ldap moduleload back_hdb moduleload back_ldap moduleload rwm

access to dn="" by * read

access to attrs=userPassword by self write by * auth

access to * by * read

# LDAP proxy database # database ldap protocol-version 3 uri "ldap://ldap.example.nl/" suffix "o=example,c=nl"

# Rewrite overlay # overlay rwm rwm-map objectClass ndsLoginProperties rwm-map attribute cn * rwm-map attribute sn * rwm-map attribute givenName * rwm-map attribute initials * rwm-map attribute mail * rwm-map attribute title * rwm-map attribute telephoneNumber * rwm-map attribute l * rwm-map attribute postalCode * rwm-map attribute postalAddress * rwm-map attribute ou * rwm-map attribute homeDirectory * rwm-map attribute uidNumber * rwm-map attribute gidNumber * rwm-map attribute uid * rwm-map attribute *

~~~~~~~~~~~~~EOF~~~~~~~~~~~~