I am following your advice to use 2.0M8. But it seems that you do not have one for Solaris platform. Is that really the case?
I will have to get all the source and build it on Solaris? Has anyone done that before? I know it is in Java but sometime, depending on the internal, we still need to do some porting before it can be fully compatible with a new platform, right? Thanks. Wayne -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Kiran Ayyagari Sent: Tuesday, December 11, 2012 1:27 AM To: [email protected] Subject: Re: Any doc about how to use ApacheDS as a proxy On Tue, Dec 11, 2012 at 3:32 AM, Zhang, Wayne <[email protected]> wrote: > Thank you. > > About the version, we might need to stay with 1.5.8 since it is > sometime just mentality. But not me, it is my above. We need to take > very stable one rather than "largely stable". > > AFAIU you are not going to store any data in the ApacheDS so it > actually doesn't matter much about the version you use. and using the new version actually makes it easier to implement your proxy interceptor with the client API [1] > So, for 1.5.8, do you think you can give me any hints of example code > or document to show me how to configure it so that the backend is a > 3rd party LDAP server rather than ApacheDS? > > the only way is to write a custom interceptor to delegate all the operations to be performed on the other server. You can use the client API to connect to the other server from the new interceptor > I guess the trick might be the > "<directoryService>#directoryService</directoryService>" configured > for a "ldapServer" in the server.xml. It looks like that is the > "backend". But I cannot find any guide on how to configure a > "directoryService" for a 3rd party LDAP server. > > no, this is an essential part of the server and as mentioned above you need to write a custom interceptor [1] http://directory.apache.org/api/java-api.html > Any hints? > > Thanks. > > Wayne > > -----Original Message----- > From: [email protected] [mailto:[email protected]] On > Behalf Of Kiran Ayyagari > Sent: Monday, December 10, 2012 1:49 PM > To: [email protected] > Subject: Re: Any doc about how to use ApacheDS as a proxy > > On Tue, Dec 11, 2012 at 3:13 AM, Zhang, Wayne <[email protected]> wrote: > > > I really appreciate your response. > > > > you are welcome, anytime > > > I did add a new interceptor and I was able to intercept (actually "bind" > > was the one fitting my need since I need the passwd) it. I could get > > all the information and change information. > > > > But what I need is to make it flow through and eventually goes to > > another LDAP server for the final processing. > > > > I am using 1.5.8 version and could not see the " > > DelegatingAuthenticator.java" you mentioned. It seems that is in 2.0. > > But I want to use a stable version and did not go 2.0. Will this > > still be doable in 1.5.8? > > > > yes, it is still doable, however I would suggest you use the latest > version, note that things are largely stabilized in 2.0 so not much > disruption and the latest is much much better than earlier versions. > Feel free to ping us anytime And otoh, with Studio's new capabilities > configuring the 2.0 server is going to be a very very smooth. > > In either case just contact us if you need anything with version >= > 1.5.7 > > > Thanks. > > > > Wayne > > > > > > -----Original Message----- > > From: [email protected] [mailto:[email protected]] On > > Behalf Of Kiran Ayyagari > > Sent: Monday, December 10, 2012 1:17 PM > > To: [email protected] > > Subject: Re: Any doc about how to use ApacheDS as a proxy > > > > you can add a new intereceptor > > take a look at the existing intereceptors and the > > DelegatingAuthenticator.java class in apacheds/interceptors/authn > > module to see how to perform delegated authentication > > > > On Tue, Dec 11, 2012 at 12:26 AM, Zhang, Wayne <[email protected]> wrote: > > > > > I would like to use ApacheDS as a proxy so that I can intercept > > > lookup and make some changes. Then I would like to forward it to > > > another LDAP > > server. > > > How can I configure it that way? I could not find any hints on > > > separating the frontend from the backend and use another LDAP > > > server as > > the backend. > > > > > > Thanks. > > > > > > Wayne > > > > > > > > > > > -- > > Kiran Ayyagari > > http://keydap.com > > > > > > -- > Kiran Ayyagari > http://keydap.com > -- Kiran Ayyagari http://keydap.com
