[Samba] Samba AD External Authentication to OpenDJ

[Andrew Bartlett]

On Sat, 2017-08-12 at 16:44 +0800, Wong Kee Wee via samba wrote:
> > This still will not work, just port your users etc to AD and use this 
> > instead. 
> > 
> > Do you use OpenDJ for anything other than authentication ? 
> > If so, what ? 
> > 
> > Rowland
> 
> Hi Rowland,
> 
> Thank you very much for the response.
> 
> The OpenDJ is for user authentication and also user profile.
> 
> Understand that Samba AD is unable to delegate authentication to an external source. We'll see how we can proceed with this info.

We realise it is frustrating, but the protocols give us little choice:
we (Samba) have to be the authentication source. 

I wish you the best with you migration.  See also the password sync
support, which may assist if you need to keep a legacy system in sync.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba