-   Linux - Server (
-   -   How to syncronize Active Directory and openLDAP (

Felipe 02-21-2012 01:59 PM

How to syncronize Active Directory and openLDAP

I use AD (Active Directory) for authentication and repository data.
But now I need to add new attributes to the LDAP of AD and we prefer to create a new parallel ldap using openLDAP.
That means I have to synchronize some attributes from one LDAP to another (no need password sync).
Ex: If I add/delete a user/group to AD, i need to replicate the user/gruop in openldap. And for speed purposes, I'll replicate some attributes from AD to openldap.

Can any tell me if is there any way or software to synchronize AD and openldap?


uhelp 02-21-2012 02:11 PM

Try this. An open source connector written in java. Never used it myself.

Felipe 02-22-2012 03:02 AM

Thank you. Interesting link which can help me. I'm going to try that option.

I've also seen "389 DS ldap":

And also, "openldap" with proxy to AD.

melive 09-04-2012 12:09 PM

How do you solve the problem? I follow your links but I don't see there how to synchronize AD witn OpenLDAP.. Please help me!

Felipe 09-12-2012 09:28 AM

Finally, I've not synchronized openldap and AD.

I've configured openldap to receive queries for Opendap and Active Directory (chaining) so openldap acts as a proxy for Active Directory.

If entry is in openldap, it returns the result to the client.
if entry is in Active Directory, openldap searches for it and return the result to the client.


melive 09-12-2012 06:46 PM

I have decided to do the same, but I'm following

and I have the next error...

glue: no superior found for sub cn=pepito,dc=prueba,dc=com!
slaptest: subordinate configuration error

Any idea?

Felipe 09-17-2012 03:30 AM

I tried with that link, but it didn't work for me.
Finally I had to add this at the bottom of configuration file (My ad domain is

database ldap
uri "ldap://"
suffix "dc=curso,dc=red"
chase-referrals yes
rebind-as-user yes

If it doesn't work, tell me.


melive 09-18-2012 10:32 AM

Thanks so much! It works correctly :) but in the uri I used the IP address.

All times are GMT -5. The time now is 08:26 AM.