User Tools

Site Tools


OpenLDAP to AD Public Proxy

Project Member(s)

  • N/A


Like many orgs, the ACM's Active Directory forest is completely internal and is not reachable from the public internet. However, some of this information is safe to expose, at least non-anonymously, via a publically facing proxy. OpenLDAP has a history of being used as a basic public proxy for an Active Directory forest by exposing a limited subset of data mapped between the two systems (the schemas used do not need to match, just map). This can also be done securely since non-SSL traffic can be disabled and the public SSL certificate for the main hostname can be used to secure the connection without the requirement of some workaround using a custom CA.



*Fill in when updates to document*

sig/sysadmin/projects/project4.txt · Last modified: 2021/05/02 21:36 (external edit)