On Wed, Apr 20, 2011 at 12:39 PM, Bill MacAllister whm@stanford.edu wrote:
--On Wednesday, April 20, 2011 10:23:20 AM -0400 Alejandro Imass ait@p2ee.org wrote:
Hello,
[...]
One way to do this is to configure your OpenLDAP server to generate an accesslog. They you read the accesslog looking for any changes and apply the changes to your downstream datastore whatever it is. We do this using perl and Net::LDAPapi. I can provide an example if you are interested.
Hi Bill, thank you *very* much for your prompt reply. One question (actually 2) though before I ask for the trouble of providing an example.... do you get the clear text passwd on the accesslog? is the the log an LDIF format? It's not that I really need clear text, but I need to compute the corresponding password hashes for MS-AD. are you guys able to change the password fields as well? or are you just copying the hashes from one to the other? how does this work with the accesslog method?
Again many thanks because I really feel that this could be a practical KISS way of integrating this.
Thanks!!! Alex
Bill
--
Bill MacAllister Infrastructure Delivery Group, Stanford University