Hi Folks,
I am having troubles configuring openladp to my requirements.
I am setting up an openldap server running on solaris 10 x86 to use as
a ldap proxy authentication server.
My issue is that i cant get it to send authenticated simple binds to the
backend ldap system. I am running wireshark and when i ldapsearch direct to
the backend ldap i see a bind which looks like this :-
Lightweight-Directory-Access-Protocol
LDAPMessage bindRequest(1)
"cn=mybindid,cn=users,dc=core,dc=dir,dc=mycompany,dc=com" simple
messageID: 1
protocolOp: bindRequest (0)
bindRequest
version: 3
name:
cn=mybindid,cn=users,dc=core,dc=dir,dc=mycompany,dc=com
authentication: simple (0)
simple: 384174656C73747261316732
However when i initiate an ldapsearch to my local solaris slapd and capture
the proxied backldap bind to the backend ldap system it looks like this :-
Lightweight-Directory-Access-Protocol
LDAPMessage bindRequest(1) "<ROOT>" simple
messageID: 1
protocolOp: bindRequest (0)
bindRequest
version: 3
name:
authentication: simple (0)
simple: <MISSING>
I am having trouble working out from the documentation if it should be
acl-bind or idassert-bind or some other option which influences the backend
bind. I have tried both those to no avail.
Here is the "database ldap" section from my slapd.conf
#######################################################################
# ldap database definitions
#######################################################################
database ldap
uri "ldap://backendldap.core.dir.mycompany.com";
suffix "ou=People,ou=eProfile,dc=core,dc=dir,dc=mycompany,dc=com"
rootdn "dc=core,dc=dir,dc=mycompany,dc=com"
acl-bind bindmethod=simple
binddn="cn=mybindid,cn=users,dc=core,dc=dir,dc=mycompany,dc=com"
credentials="password"
idassert-bind bindmethod=simple
binddn="cn=mybindid,cn=users,dc=core,dc=dir,dc=mycompany,dc=com"
credentials="password"
overlay pcache
proxycache bdb 400 1 50 1200
directory /var/openldap-data
cachesize 10000
index cn,sn,uid pres,eq,sub
index objectclass eq
proxycachequeries 400
proxyattrset 0 uid mail cn sn givenName
proxytemplate (uid=) 0 600
proxytemplate (mail=) 0 600
proxytemplate (&(uid=)(mail=)) 0 600
Any help would be greatly appreciated
Regards Rep
