Minh Duong - 2015-04-30

Hi,

I need to join 2 active directories/ldap servers and add some attributes of the joined namespace to the joined entries. I am able to see the correct joined entries but they do not have any attributes from the joined namespace (they do have joinedBases and joinedDNs). I found an exact configuration example of joining identities between a db and an ad but I haven't managed to make it work for my case. This is my configuration

server.listener.port=389

server.globalChain=LogAllTransactions
server.globalChain.LogAllTransactions.className=net.sourceforge.myvd.inserts.DumpTransaction
server.globalChain.LogAllTransactions.config.logLevel=debug
server.globalChain.LogAllTransactions.config.label=Global

server.nameSpaces=Root,AD1,AD2,Joiner

server.Root.chain=RootDSE
server.Root.nameSpace=
server.Root.weight=0
server.Root.RootDSE.className=net.sourceforge.myvd.inserts.RootDSE
server.Root.RootDSE.config.namingContexts=o=ad1|o=ad2|ou=join,dc=domain,dc=com
server.Root.RootDSE.config.supportedControls=2.16.840.1.113730.3.4.18,2.16.840.1.113730.3.4.2,1.3.6.1.4.1.4203.1.10.1,1.2.840.113556.1.4.319,1.2.826.0.1.334810.2.3,1.2.826.0.1.3344810.2.3,1.3.6.1.1.13.2,1.3.6.1.1.13.1,1.3.6.1.1.12
server.Root.RootDSE.config.supportedSaslMechanisms=NONE

server.AD1.chain=LDAP
server.AD1.nameSpace=o=ad1
server.AD1.weight=100
server.AD1.LDAP.className=net.sourceforge.myvd.inserts.ldap.LDAPInterceptor
server.AD1.LDAP.config.host=host-ad01
server.AD1.LDAP.config.port=389
server.AD1.LDAP.config.remoteBase=OU=Users,DC=examples1,DC=com
server.AD1.LDAP.config.proxyDN=CN=Abraham Lincoln,OU=Users,DC=examples1,DC=com
server.AD1.LDAP.config.proxyPass=abraham.lincoln
server.AD1.LDAP.config.passBindOnly=true

server.AD2.chain=LDAP
server.AD2.nameSpace=o=ad2
server.AD2.weight=0
server.AD2.LDAP.className=net.sourceforge.myvd.inserts.ldap.LDAPInterceptor
server.AD2.LDAP.config.host=host-ad02
server.AD2.LDAP.config.port=389
server.AD2.LDAP.config.remoteBase=OU=Users,DC=examples2,DC=com
server.AD2.LDAP.config.proxyDN=CN=Abraham Lincoln,OU=Users,DC=examples2,DC=com
server.AD2.LDAP.config.proxyPass=abraham.lincoln
server.AD2.LDAP.config.passBindOnly=true

server.Joiner.chain=joiner
server.Joiner.nameSpace=ou=join,dc=domain,dc=com
server.Joiner.weight=0
server.Joiner.joiner.className=net.sourceforge.myvd.inserts.join.Joiner
server.Joiner.joiner.config.primaryNamespace=o=ad2
server.Joiner.joiner.config.joinedNamespace=o=ad1
server.Joiner.joiner.config.joinedAttributes=sAMAccountName,sampleAttrFromAd1
server.Joiner.joiner.config.joinFilter=(sAMAccountName=ATTR.sAMAccountName)

What do I need to do to make this work? Do I need to map those additional attributes to something else?

Thank you.