Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have in our company multiple directories (Active Directory, Domino, OpenDS). Domino (and it seems AD) give the ability to have multiple logins for the same user (aliases). Is there a way to achieve the same thing with an OpenDS directory?

I have tried to put multiple cn on a user (which is authorized) without success: the user can only bind with his primary cn.

I have also look at LDAP alias object, but I have found a resource saying it's clearly limited to search and not to bind.

There a similar question for Active Directory, with a working solution.

share|improve this question
up vote 1 down vote accepted

Whatever application you're using would have to support looking up the alias in whatever new LDAP attribute you store it into. In the linked example, Windows Authentication in all of its glorious forms knows about SAMID and UPN, so it will look up both of those. Whatever is using your OpenDS directory would need to know about the alias, in the same fashion.

share|improve this answer
Ok, thanks. This was one of my assumption. User aliasing is not directly managed by LDAP server but by a lookup by the client for existing alias and a bind with the real CN associated with this alias. – PomCompot Dec 19 '12 at 14:31

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.