Re: Using Perl to replicate between Novell E-Directory and NetscapeDirectory Server

[Knut S. <knu...@se...>]

What Jim says is perfectly right - never replicate data if you can
avoid. 
In Fact replicating passwords won't work between systems using diffren
password schemes, what is the case for Netscape and NDS.

I do not have a working solution for your problem but I don't see, why
Cognos stuff only supports Netscape. If it uses plain LDAPv3 you may be
able to create a NDS to LDAP mapping (object classes and attribute
names) which looks like a Netscape LDAP.
An other idea, which may work, is to use the LDAP-proxy functionality of
Netscape to connect your webserver to the Netscape directory which
delegates the requests to NDS.

If you find a good solution I would be intrested ...

-knut


Jim Harle wrote:
> 
> This is an ugliness of using 2 different directories.  We are looking into
> how to coordinate passwords eDirctory and Active Directory.  The problem
> is that password values are stored internally and can't be read, thus not
> copiable between the two.  The only way to make this work is to have the
> password changing mechanisms send things to both places.  That in itself
> is very difficult if you have multiple mechanisms.
>   --Jim Harle
> 
> On Tue, 26 Mar 2002, Edd Dawson wrote:
> 
> >
> > Hi,
> >
> > Just an idea i'd like to run past people, and see if you think i'm barking
> > up the wrong tree completely!
> >
> > At work we use Novell E-Directory for all our authentication needs, and i
> > have used perl-ldap for talking to and unpdating E-directory.
> >
> > We have bought Cognos Impromptu Web, which for those who dont know serves
> > reports via the web. Users have to log into it, and it uses Netscape
> > Directory Server (which is ldap based) for user authentication... it will
> > not let us use E-Directory for user authentication.
> >
> > We want to be able to sync the usernames and passwords in Netscape
> > Directory Server with those in Novell E-Directory using Ldap, and most
> > likely perl for writing the sync-ing mechanism.
> >
> > Does this seem like a reasonable proposition, and has anyone here ever had
> > any experience of doing such a thing?
> >
> > Thanks for your time
> > Edd Dawson