Hi everyone, Hopefully I'm now sending this to the right list, apologies if not....
I am trying to find a way of exporting most information from the GAL into an LDAP server. It seems that OpenLDAP might do what I want, however I'm relatively new to using LDAP, so I was wondering if someone could give me a few pointers on how to do this.
It sounds like I need to use a slapd as a Proxy Cache Engine, so I can cache an AD query (preferably the equivalent of the Exchange GAL) into OpenLDAP. People can then use the OpenLDAP server as a Directory source in Outlook without needing to log in to anything.
I need to do something like this so that people who do not have access to the Exchange Servers can see (and therefore email) accounts in Exchange.
I have found some mailing list articles that allude to this, but nothing specific. Thank you,
Chris
Clemson, Chris (IHG) wrote:
I am trying to find a way of exporting most information from the GAL into an LDAP server. It seems that OpenLDAP might do what I want, however I'm relatively new to using LDAP, so I was wondering if someone could give me a few pointers on how to do this.
It sounds like I need to use a slapd as a Proxy Cache Engine, so I can cache an AD query (preferably the equivalent of the Exchange GAL) into OpenLDAP.
A reverse caching proxy stores the data in a transient cache. This might not be what you want when saying "exporting most information" from GAL.
People can then use the OpenLDAP server as a Directory source in Outlook without needing to log in to anything.
If that's your main goal you can use a reverse proxy. If you want to use the proxycache overlay slapo-pcache is the 2nd question.
See man slapd-ldap.5 for back-ldap and look at configuration directives starting with "idassert".
Ciao, Michael.
A reverse caching proxy stores the data in a transient cache. This might not be what you want when saying "exporting most information" from GAL.
People can then use the OpenLDAP server as a Directory
source in Outlook
without needing to log in to anything.
If that's your main goal you can use a reverse proxy. If you want to use the proxycache overlay slapo-pcache is the 2nd question.
See man slapd-ldap.5 for back-ldap and look at configuration directives starting with "idassert".
Thanks for the info, I will look into that!
Chris
openldap-technical@openldap.org
-
Clemson, Chris (IHG) -
Michael Ströder