1

I read article Combining OpenLDAP and Active Directory via OpenLDAP meta backend. I defined my OpenLDAP proxy.

How does the mapping work?:

olcDbMap: {2}attribute entryUUID objectGUID 

It's not working correctly for me. Applications with GUI relying on this attribute experience errors.

When I search for the entryUUID value among the entries from AD, I don't get a value.

When I cancel this mapping, I get the value Invalid SID in Apache Directory Studio. Is there any way to achieve the goal of transforming objectGUID (AD) to entryUUID (OpenLDAP)? Perhaps the rwm module and some rules for rebuilding the objectGUID field value?

4
  • When I search for the entryUUID value among the entries from AD, I don't get a value. how are you searching? Commented Aug 3 at 19:53
  • I have an LDIF file like this: github.com/slawascichy/docker-openldap-proxy/blob/main/init/… for setting attributes for the AD proxy. When I connected the OpenLDAP database from the proxy (without this definition), the entryUUID attribute is indeed returned by ldapsearch. However, when communicating with the AD proxy, the attribute is not returned. Applications relying on this attribute experience errors. So, could you at least send me versions of the products you used? My Openldap version is slapd 2.6.7+dfsg-1~exp1ubuntu8.2 and AD Windows Server 2016 Commented Aug 4 at 8:42
  • In answer to your question: applications with GUI relying on this attribute experience errors. So I try identify difference between proxy OpenLDAP and AD. E.g. phpLDAPadmin, when i changed in LdapRecord\Models\OpenLDAP\BaseEntry from ` protected string $guidKey = 'entryuuid';` to protected string $guidKey = 'uid'; it works, but, I can't change it in all aplications. Commented Aug 4 at 8:48
  • Sample ldapsearch. For entry in OpenLDAP: ldapsearch -x -D "cn=manager,ou=local,dc=scisoftware,dc=pl" -W -b "dc=scisoftware,dc=pl" "(uid=slawas)" cn uid entryuuid; for entry in AD:ldapsearch -x -D "cn=manager,ou=local,dc=scisoftware,dc=pl" -W -b "dc=scisoftware,dc=pl" "(uid=scichy)" cn uid entryuuid. Commented Aug 4 at 16:55

0

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.