Re: setting up openldap to proxy to AD on SUSE ENT 12

Quanah Gibson-Mount wrote:

--On Tuesday, February 26, 2019 9:18 AM -0800 N6Ghost n6ghost@gmail.com wrote:

...

where do i get the AD schema that's not in the schema directory.

It will be with OpenLDAP 2.5 when that gets released.  You can currently obtain it from here:

LDIF format: https://raw.githubusercontent.com/openldap/openldap/master/servers/slapd/schema/msuser.ldif

Deprecated Schema Format: https://raw.githubusercontent.com/openldap/openldap/master/servers/slapd/schema/msuser.schema

Quoting from above files:

# Only the subset of Windows 2012 attributes needed to make the # user and group objectclasses work has been added to the previously # retrieved definitions.

This is not a complete Microsoft schema, nor was it ever intended to be complete.