Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Having just started using OpenLDAP to authenticate users across web apps, I'm intrigued by a pattern I'm seeing in the documentation: Most install/config guides seem to (implicitly) recommend running the ldap server on

As I installed ldap on my VPS, I just thought it'd be simpler to access it all through

Is there any benefit of either approach? Or is it just assumed that the ldap software will run on it's own machine?

share|improve this question
up vote 5 down vote accepted

If you ever wish to separate services into different boxes, you'll want to use subdomains.

Think about what happens when you run LDAP and a web server on and later on you decide to move the web server somewhere else, but LDAP stays in the same box.

share|improve this answer

It's good practice that services accross a domain are named as follow


But, that's just good practice. If you prefer to name it, and this name resolves to your LDAP server, feel free to do so :)

In fact, if you ldap and your webapps are running locally, you might as well connect to it using ldap://

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.