Using OpenLDAP to test stuff for use with Active Directory

Since you can query Active Directory with LDAP queries, I figured it would be cool to use OpenLDAP for testing AD-type shit on my mac.

First I dump the users and groups and OUs and whatnot, and then I import them into OpenLDAP. The bitch is wanking with the schema to get a decent import.

Once you've got a decent schema (or you can just target the attributes you want to import or export, as it's far easier than making one that will work with the entire tree), it's pretty straight-forward, and seems to sorta work as you'd expect.

My memberOf query dies so far tho, so I'm thinking multi-value stuff doesn't work the same for some reason, or my schema is fuxored somehow. Same query works for AD... the data /looks/ the same...

Eh.

GIGO.

Something like that.

Links:

http://www.openldap.org/faq/data/cache/1461.html

http://www.kouti.com/tables/syntaxes.htm

http://www.openldap.org/doc/admin24/quickstart.html

https://help.ubuntu.com/7.04/server/C/openldap-server.html