Dear list!

We are trying something we thought should be simple:

We have got

Server A: Holds an LDAP database Server B: Is supposed to act as a proxy to A

Both are OpenLDAP, A is 2.2; B is 2.4.

What we want to achieve is that server B will just proxy everything from server A except that some attribute names shall be rewritten, i.e. B is queried for a different attribute name as the actual name on A.

Here is what we did:

database ldap suffix "o=world" uri "ldap://ldap.our.tld/" overlay rwm rwm-map attribute authzTo saslAuthzTo

The problem with that setup is that it will crash server B.

In some example we found somthing like this:

database ldap suffix "o=world" uri "ldap://ldap.our.tld/" overlay rwm rwm-map attribute authzTo saslAuthzTo rwm-map attribute *

So as soon as we add that wildcard line, slapd (on server B) will no longer crash, but unfortunately, it is not going to find anything anymore.

Could anyone help out with an example?

Regards, Torsten