Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 2 down vote favorite
2

We have a services in a isolated network. These services need to authenticate users against the Active Directory server.

However the Active Directory server is not directly available so I have to setup a LDAP proxy in the isolated network. The LDAP proxy will then have access to the AD.

  • Is this possible/feasible?
  • Is the term "proxy" the good term?
  • Is A Microsoft AD server mandatory or OpenLDAP will do the job fine?
  • I have few knowledge about AD/LDAP, how is the learning curve?
  • A few hints where to begin?

Thanks.

share|improve this question

1 Answer

up vote 1 down vote

Active Directory Lightweight Directory Services seems like exactly what you need - but if you want to directly authenticate against AD, you could instead just do a TCP proxy back to your AD servers; HAProxy would be a good fit.

share|improve this answer
Do some iptables rules do the same job as you're describing? debian-administration.org/articles/595 – SamK May 15 '12 at 9:04

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.