thank you very much: it works very well with slapd(8) 2.3.27. my issue now is that i will have to use the package supplied by RH enteprise 4: openldap-servers-2.2.13-6.4E and with this version i get this message:

unknown directive "idassert-bind" inside backend database definition (ignored) line 80 (idassert-authzfrom "dn.regex=.+")

slapd doesn't know idassert-authzfrom !

so, do you know if there is an other directive with this version that enable me to do the same things (anonymous bind rewrite as an admin DN)

Thank you for your help ?

Message du 06/01/07 à 00h38 De : "Pierangelo Masarati" A : jerrrry@voila.fr Copie à : openldap-software@openldap.org Objet : Re: openldap proxy issue

jerrrry@voila.fr wrote:

...

hi,

I'am configuring slapd(8) 2.3.27 for use as a proxy to another LDAP server.

the purpose is to do an ldap authentication to a ldap backend, that need that an administator account bind to do a search, with applications that can only do an anonymous bind.

can openldap rewrite the anonynous connection to bind with the administrator acount instead ?

Try something like:

database ldap suffix "dc=example,dc=com" uri "ldap://:9011" idassert-bind bindmethod="simple" binddn="cn=Manager,dc=example,dc=com" credentials="secret" mode="self" idassert-authzfrom "dn.regex=.+" idassert-authzfrom "dn:"

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.n.c. Via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it

---

Office: +39.02.23998309 Mobile: +39.333.4963172 Email: pierangelo.masarati@sys-net.it

---