How to create LDAP federated tables in MySQL

You can use the SQL Gateway to configure a MySQL remoting service and set up federated tables for LDAP objects. The service is a daemon process that provides a MySQL interface to the CData ODBC Driver for LDAP: After you have started the service, you can create a server and tables using the FEDERATED Storage Engine in MySQL. You can then work with LDAP objects just as you would local MySQL tables.

Connect to LDAP Objects

If you have not already done so, provide values for the required connection properties in the data source name (DSN). You can use the built-in Microsoft ODBC Data Source Administrator to configure the DSN. This is also the last step of the driver installation. See the "Getting Started" chapter in the help documentation for a guide to using the Microsoft ODBC Data Source Administrator to create and configure a DSN.

To establish a connection, the following properties under the Authentication section must be provided:

• Valid User and Password credentials (e.g., Domain\BobF or cn=Bob F,ou=Employees,dc=Domain).
• Server information, including the IP or host name of the Server, as well as the Port.

• BaseDN: This will limit the scope of LDAP searches to the height of the distinguished name provided.

  Note: Specifying a narrow BaseDN may greatly increase performance; for example, cn=users,dc=domain will only return results contained within cn=users and its children.

Configure the SQL Gateway

See the SQL Gateway Overview to set up connectivity to LDAP objects as a virtual MySQL database. You will configure a MySQL remoting service that listens for MySQL requests from clients. The service can be configured in the SQL Gateway UI.

Create a FEDERATED Server and Tables for LDAP Objects

After you have configured and started the service, create a FEDERATED server to simplify the process of creating FEDERATED tables:

Create a FEDERATED Server

The following statement will create a FEDERATED server based on the ODBC Driver for LDAP. Note that the username and password of the FEDERATED server must match a user account you defined on the Users tab of the SQL Gateway.

CREATE SERVER fedLDAP
FOREIGN DATA WRAPPER mysql
OPTIONS (USER 'sql_gateway_user', PASSWORD 'sql_gateway_passwd', HOST 'sql_gateway_host', PORT ####, DATABASE 'CData LDAP Sys');

Create a FEDERATED Table

To create a FEDERATED table using our newly created server, use the CONNECTION keyword and pass the name of the FEDERATED server and the remote table (User). Refer to the following template for the statement to create a FEDERATED table:

CREATE TABLE fed_user (
  ...,
  id  TYPE(LEN),
  logoncount  TYPE(LEN),
  ...,
)
ENGINE=FEDERATED
DEFAULT CHARSET=latin1
CONNECTION='fedLDAP/user';

NOTE: The table schema for the FEDERATED table must match the remote table schema exactly. You can always connect directly to the MySQL remoting service using any MySQL client and run a SHOW CREATE TABLE query to get the table schema.

Execute Queries

You can now execute queries to the LDAP FEDERATED tables from any tool that can connect to MySQL, which is particularly useful if you need to JOIN data from a local table with data from LDAP. Refer to the following example:

SELECT 
  fed_user.id, 
  local_table.custom_field 
FROM 
  local_table 
JOIN 
  fed_user 
ON 
  local_table.foreign_id = fed_user.id;