Ldap BIND trough virtual directory.

Question

Hello,
I'm guessing if I could use DS6 virtual directory proxy to enable the "Access Manager Ldap Authentication Module" to authenticate users both on a DS and on AD backends.
In my scenario some users are registered on DS backend while other users are registered on AD.
AD and DS root-suffix are different and also accounId (uid and samaccountname) are different.
So every account/password can be found in just only one backend repository.
Could I use DPS to let Access Manager (Ldap Auth Module) to authenticate all users referring always and only to DPS?
(I know AM has chaining authentication but it pops the login form for each backend repository).
Many thanks in advance.

Answer 1

Is there a way (a regular expression maybe?) to tell where the user is stored from the dn ?
if yes, you could use the distribution feature in DPS.
if not, then you may be out of luck.
Are both back-ends active (i.e. being updated ?) or is one of them pretty much static ?
One restriction with the DPS join feature is that entries are only visible at the join level if they exist at least one the pimary source. So in your case it may or may not work.
Another solution (yes, what's nice about virtualization is that there are a number of ways to do things) would be to have two separate views, one pointing your DS and the other pointing to your AD. You would then use dn and attibute transformations to rewrite the data from both backends in a consistent way. The issue would then be to handle the case where you have a user with the same (rewritten) dn on both backends.
hth
-=arnaud=-