Hello,
The best solution is to have one ApacheDS instance as a _proxy_ and
cause you are going to use
it in embedded mode then you practically have all things ready to make
this solution work, provided
you know which 3rd party server needs to be contacted for a specific
request when a cert is not present.
If you can determine that information based on the search request,
then the best way to solve it in
the proxy ApacheDS instance is by adding a new in-memory partition and
overwrite the search() method.
Does that mean using an embedded Apache Ds with an own interceptor? Or
is there a partition class whose search method to overwrite?
Why to use a new in memory partition and is there any kind of
relatioship between a scheme (definition) and a partition?
Sebastian