please discuss this on the list.

I do not fully understand why you need synchronization.

If it is because your LDAP client (i.e. liferay) only supports one LDAP-URI but you have two different user directories (AD and OpenLDAP), than there would be no need for synchronization: OpenLDAP could be used to integrate both directories under one URL (e.g. by meta backend)

On 25.03.2013 10:02, Suman Karki wrote:

thank you for your reply. And i need some help that can perform my task.

I am using liferey for web hosting. Which is http://www.liferay.com/

I am managing liferay's user accounts with open ldap server.

And i need to sync AD to Open Ldap .

So through one Open Ldap server configuration i can access both servers user account.

I have admin access to both server.

Just, I need to sync AD to Open Ldap server for user account accessing.

On 3/25/13, Mark Pröhl mark@mproehl.net wrote:

...

on 25.03.2013 06:57, Suman Karki wrote:

...

I am running open ldap server in redhat server, and active directory in win server 2008. I have admin access to both servers.

The thing is that i have to sync both server, like from openldap i could access active directory data.

So anybody tell me how can we synchronize both server, any solutions ? or it will be better if anyone provide me some tutorials or better give me some documentation?

please i need to solve this problem as soon as possible.

can you describe your requirements a little bit more? I.e.

• which attributes do you need to be synchronized?
• do you need to synchronize from AD to OpenLDAP or from OpenLDAP to AD or in both directions?
• do you need passwords to be synchronized?

BTW: OpenLDAP can be configured as a (caching) LDAP proxy to Active Directory. Configuring that is much more simple than synchronization with AD.

For synchronization you will need some kind of 3rd-party product, like the SPML based solution mentioned here: http://www.openldap.org/lists/openldap-technical/201303/msg00167.html

-- Mark Pröhl mark@mproehl.net www.kerberos-buch.de