Plugin to do bind aliasing, or something else

We've got some client applications, that we do not control, that want to construct a DN and bind to it. They do that to perform authentication, which I know is "wrong", but we are stuck with them.

We currently maintain an Accounts subtree using account IDs in the RDN for those applications. The entries are to some extent duplicates of the data in our People subtree, which use a meaningless-but-unique-number in the RDN.

Does anyone have a plugin that will detect a bind on the Accounts subtree, perform a search in the People subtree, and then rewrite the target DN of the bind?

Or is there a better way?

[633 byte] By [PaulHilcheya] at [2007-11-26 20:48:49]