Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have an environment that we are tasked with managing while also giving access to projects that run the applications on the servers. Some of those projects have stood up LDAP for authenticating project users. Without getting into the discussion of why we didn't do it right in the first place we would now like to stand up our own LDAP to manage our users while not stepping on the existing LDAP configurations stood up by each project. Basically, our LDAP would be entirely separated from the project LDAP.

Is it possible to configure Linux (RHEL) to authenticate against more than one LDAP server? I'm thinking in terms of cascading authentication options: Check LDAP 1 for an account; If no account exists check LDAP 2; If no account exists check locally.

It seems like this would be possible, but having never configured LDAP I have no knowledge of whether it actually is a configurable methodology.

share|improve this question

1 Answer 1

Yes, this is possible.

  • sssd with multiple domains
  • sssd with single domain and slapd-meta(5)
  • nss-ldap and pam_ldap with slapd-meta
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.