LDAP Proxying

I am not completely sure "Proxying" is the right term to use.

I am currently using Apache's flat file basic authentication for a cgi
application. Have a new requirement to authencate a group of users in
another LDAP server outside my administrative control for the same
application.

Not sure how to best go about this.

I am thinking of setting up my own OpenLDAP server, converts the flat
file basic authentication into LDAP entries and "Proxy" to that other
LDAP server for users not found in my own OpenLDAP server.

Is this possible?

Thanks for reading.

Luke Chiam
Webesse

--On Wednesday, May 11, 2005 4:29 PM -0700 luke@webesse.com wrote:

> I am not completely sure "Proxying" is the right term to use.
>
> I am currently using Apache's flat file basic authentication for a cgi
> application. Have a new requirement to authencate a group of users in
> another LDAP server outside my administrative control for the same
> application.
>
> Not sure how to best go about this.
>
> I am thinking of setting up my own OpenLDAP server, converts the flat
> file basic authentication into LDAP entries and "Proxy" to that other
> LDAP server for users not found in my own OpenLDAP server.
>
> Is this possible?
>
> Thanks for reading.

You might ask openldap-software@openldap.org

--Quanah


--
Quanah Gibson-Mount
Principal Software Developer
ITSS/Shared Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

[ cc'd to Original poster ]
On May 11, 2005, at 6:29 PM, luke@webesse.com wrote:

> I am not completely sure "Proxying" is the right term to use.
>
> I am currently using Apache's flat file basic authentication for a cgi
> application. Have a new requirement to authencate a group of users in
> another LDAP server outside my administrative control for the same
> application.
>
> Not sure how to best go about this.
>
> I am thinking of setting up my own OpenLDAP server, converts the flat
> file basic authentication into LDAP entries and "Proxy" to that other
> LDAP server for users not found in my own OpenLDAP server.
>
> Is this possible?

Not only possible. Practical.

If you're using apache 1.3.x you should see:

http://www.muquit.com/muquit/softwa..._auth_ldap.html

Your flatfile can become the back up authentication database. Make sure
to read the docs for the AuthLDAPAuthoritative option.

cp