How to sync LDAP and AD? Please help!

[MAXTOR]

Hi all,

I have a Linux server which provides LDAP directory services, and I need to
install a Citrix Metaframe server too, but I'm required to authenticate
against the LDAP database instead of hardcoded user accounts created on the
Citrix server.

I talked to a few people and it seems the best answer would be to have a DC
and replicate all LDAP user accounts in AD.

Can anyone help me do this?

Thanks in advance.

MAXTOR

 

[Herb Martin]

You will probably do better with this question
in one of the programmer's -- maybe crossposting
here as well.

You are probably going to be writing something;
Perl has good LDAP libraries.....

 

[Dan]

Sun also makes a product called IDSync that might be
worth taking a look at.

 

[Joe Richards [MVP]]

There are several products that will do this such as LDSU, MIIS, and others but
from the adjectives used in the post (*a* linux server, *a* citrix server) I am
wondering if this person is going to be willing to spends thousand or tens of
thousands for a product when he probably only needs a basic LDAP sync that could
be a basic perl script.

joe

 

[MAXTOR]

Your're right Joe.

I've been told I can install Samba on the Linux server and set it up to use
the backend LDAP directory, and that way the Citrix server would see the
users and groups as if it was coming from a NT4 PDC.

What do you think? It would certainly put less stress on the Citrix server
since I wouldn't have to promote it to a DC...

MAXTOR

 

[Joe Richards [MVP]]

That is definitely an option. However a Windows 2000 or better DC offers a great
deal of capability in the way of group policies and such for managing things.

Definitely test it well in your lab environment to make sure it works as expected.

joe

 

[Kieran]

Novell also puts out a product to sync directories as well if that helps.