We have a MS Active Directory to provide LDAP to our application. Now we would like to setup an OpenLDAP server, with MS AD synchronization.
Besides, for security we need to setup a password policy on this OpenLDAP to disable accounts.
1. Can we do that ?
2. If account is disabled on OpenLDAP, how about on MS AD ?

i installed some ldap client packages into linux OS and was able to login to my linux system using ldap user, but when i changed my ldap user password i am not able to login to the same system using the same user but a new password?? any idea?

Ldapsearch from OpenLDAP tools uses by default SASL authentication method. This can have incompatibility issues with SUN directory server, for example.

To use simple login method, use -x option: