Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an OpenLDAP server with the following in its configuration file:

suffix          "o=a.b.priv"
rootdn          "cn=Manager,o=a.b.priv"

I am setting up a new project which will make use of the following:

suffix          "o=c.b.priv"
rootdn          "cn=Manager,o=c.b.priv"

Is it possible for these two to coexist on the same OpenLDAP server instance?

I am guessing it is not possible and that my options will be

  • set up a second instance listening on a different port on the same box
  • 'refactor' the existing data (is that even possible? I'm new to LDAP) so that the root is b.priv and the rootdn is cn=Manager,o=b.priv with children of o=a.b.priv and o=c.b.priv

Is there another option?

share|improve this question
up vote 0 down vote accepted

Multiple DITs do appear to be possible. Take a look at this documentation and example. As for the prudence in doing so, I can't speak to your requirements. Completely understanding the documentation before pursuing does seem wise. Perhaps an OpenLDAP specific group could help you assess your idea. But be warned, they can be testy if you have not done your homework.


share|improve this answer

You can create multiple, separate databases with OpenLDAP. You'll find details in the documentation.

Setting up a second instance on a nonstandard port is not a good idea, IMHO, as you have to be careful to specify the correct port wherever you use this instance.

share|improve this answer
Thanks, that's a relief! As I'm quite new to LDAP, I don't really know what I'm looking for in the docs - are you able to be a bit more specific please? Thanks in advance... – Rich Apr 21 '11 at 12:53

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.