Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

In my college there's an LDAP server managed by the staff. We can use this LDAP server from our machines, but cannot modify attributes (eg: user login shell).

We'd like to modify these attributes, so we were thinking of setting up an LDAP server working as a proxy for the other one: we would set any attribute we need on our LDAP server, and then use the one offered by the staff for authentication.

Is there any way to do this?

share|improve this question
add comment

2 Answers

The correct answer is replication. Arrange for the administrators of the LDAP server to have its contents replicated to your local LDAP server. They might refuse, since the database could diverge if the replication is not multi-master or bi-directional. Failing this, configure your own LDAP server and populate with data as required and configure your LDAP clients to use the new server.

share|improve this answer
add comment

Yes, all LDAP servers offer proxy functions or can load LDIF files.

Note1 Do you want to overload (like with weight) or overlay (like with edited content)? What sort of LDAP service runs centrally?

Note2 Connect to central LDAP with softerra LDAP viewer. It detects if it is Sun/Netscape or Lotus Domino or Ad etc... Have you asked them and they refused to help?

share|improve this answer
    
Can you expand your answer to at least explain a little how to do achieve what the OP wants? –  slhck Jan 29 '12 at 16:17
    
@ZaB: I'm really not a guru of LDAP. Tried to read te guide at zytrax.com/books/ldap and played with OpenLDAP (particularly LDAP database) for a while, but still couldn't get anything working. How can I check what LDAP service is the staff running? I can bind as anonymous to it... What I need to do is providing users with different names (on staff's LDAP server everybody is called "System User"), groups (all users are in the undefined group "513"), login shells (currently anybody has /bin/nologin) and so on, but using the passwords on central LDAP server. –  peoro Feb 3 '12 at 0:48
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.