Active Directory to Openldap syncronization

[DRE.ORGY.NET]

Hi,

I was wondering if anyone was familiar (or if anyone knew if this was possible) with synchronizing user information from Active directory to open ldap.

I use Active directory internally for authentication and I have a bunch of applications which are configured to use this. I would like to be able to use the same user database for external servers and rather than exposing active directory to the internet I would prefer to replicate the user information to an openldap server so that can be used as the authentication database for public servers.

I'm not quite sure if there is an automated procedure to extract only certain parts of Active directory (maybe a couple of ou's) and import that into Openldap.

Any suggestions?

[techmum]

Rather than OpenLDAP you may find the Fedora Directory Server a better fit for your needs as it supports AD synchronization.

More info on Fedora Directory Server here >
http://directory.fedoraproject.org/

Configuring FDS and AD sync is here >
http://directory.fedoraproject.org/w...to:WindowsSync

[Yamich]

Hello,

I want to synchronize a 389 DS with an AD. The AD is on Windows 2K8, but I didn't found any up to date documentation.

Everything I tryed didn't worked.

Is it possible to have good documentation, advices, tips for that?

Google didn't help me for this project...


Thx Community!