We have a domain controller with
Active Directory with a number of basic users with custom attributes. We are looking for a way to synchronise the active directory users to
OpenLDAP (currently running on Debian 6) and wondered if anyone has experience in doing this who could provide some pointers.
There is this project, but it's guides are basic and is missing AD to
OpenLDAP (it does have the vice-versa)
The hope is that every time a change is made in
Active Directory it's pushed to the
OpenLDAP server so that the users can be queried there. We don't want to just forward the requests as sometimes the
Active Directory server will not be available.
I'd be greatful for any advice or suggestions in this area.