Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

For a system we are developing we have 2 domains an internal and an external domain with bi directional trust between them. However the servers are only able to connect to their own DC's.

We have an application server on the internal domain which needs to use an LDAP query to gather a list of users from a group on the external domain. How do i go about writing an LDAP query that asks one DC to go ask another DC for a list of users.

I tried querying the internal DC with the same LDAP query I would use if it could hit the external DC directly but this does not work. When i use Softerra LDAP Administraor I can view the full hierarchy of the interal domain but despite the trust relationship between domains i am unable to see any of the external doamin.

Any suggestions or help would be greatly appreciated

share|improve this question

You need to use LDAP referrals.

These can be configured within Active Directory using crossRef objects.


share|improve this answer

I ran into the same problem and solved it with OpenLDAP and its meta backend:

share|improve this answer

I'm not sure if this will help or not, as I don't write LDAP queries directly, but I have c# applications that run on an application server on our external domain that must query AD on our internal domain.

In order to get this to work, I explicitly provide the FQDN of an internal DC in my LDAP connection string:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.