I have OpenLDAP configured to act as a metadirectory in front of three different backends:
database meta uri "ldap://ldap1.example.com/ou=domain1,o=combined" uri "ldap://ldap2.example.com/ou=domain2,o=combined" uri "ldap://ldap3.example.com/ou=domain3,o=combined" # ...and some suffixmap rules...
I do not have control over any of the backend directory servers.
The backends provide partially overlapping information and it is possible that someone may have an account with the same username but a different password on different backend servers.
Is it possible to enforce some sort of ordering on the backends such that (a) OpenLDAP will always query the backends in the same order and (b) return a single result (and stop searching) after finding a match? As far as I can tell, the backends are either queried in parallel or in an order that is not related to the order in which they are listed in slapd.conf.