Wednesday, April 13, 2022

[389-users] Re: Meta directory plugin in 389ds?

Hi William.

Thank you for your Answer.

On Tue, 12 Apr 2022 23:38:54 +0000
William Brown <> wrote:
> > On 13 Apr 2022, at 04:41, Alex <> wrote:
> >
> > Dear List-Members.
> >
> > Please can you help me to find the right plugin, if there is any, in 386ds
> > which can be used similar to the slapd-meta and slapo-rwm?
> >
> >
> >
> We don't have anything like slapd-meta, but we do have cos which could
> suffice for rwm. Have a look at:

With "cos" you mean "Class of Service" right,

and the corresponding howto.

Btw. the link on the howto should point to this page, IMHO.

> > What I try to achieve is to create a meta directory in front on MS Active
> > Directory for different AD Groups and propagate this group via 386ds.
> You could use ad-sync to consume data into 389-ds, and then cos to template
> out extra groups and data on-top?

Well I don't want to store any data on DS I just want to use it as poxy and
cache in front of AD.

> I think a more detailed worked example could help us to know if the advice we
> are giving is correct :)

I'm in the concept phase an try to find the right product for the customer
which want to use a SSO solution.
keycloak is one of the options and therefor I just wanted to know if the 389ds
could be used somehow as proxy and mapping thing in front of keycloak.

As far as I understood the architecture of 389ds it looks to me that this
feature isn't there, right?

> > I have seen this plugins but I don't know the wording in 386ds therefore I
> > hope anybody can help me to find the right wording and plugins in 386ds if
> > this is possible.
> >
> >
> >
> > Thank you for any help.
> >
> > Regards
> > Alex
> > _______________________________________________

> --
> Sincerely,
> William Brown
> Senior Software Engineer,
> Identity and Access Management
> SUSE Labs, Australia
> _______________________________________________
389-users mailing list --
To unsubscribe send an email to
Fedora Code of Conduct:
List Guidelines:
List Archives:
Do not reply to spam on the list, report it:

No comments:

Post a Comment