0

I have multiple LDAP servers and different user groups in each. I want to authenticate using both LDAP servers which have different base DNs.

Is it possible to put in multiple bind and base DN values in ldap.conf?

1 Answer 1

1

No. At best, you could split off authentication to one server and your NSS lookups for users and groups to another server.

The only way to have a "meta database" that consolidates the information of both is to actually maintain one. You must sync data from one server to the other, or set up a third server that replicates the necessary trees from the two other servers.

3
  • Hi @andrew-b. How do you split off authentication and the NSS lookups. I do not quite get the picture.
    – Carlo
    Jul 8, 2013 at 16:20
  • @Carlo That's a different question than the one you were asking and the answer is not simple. Please submit a new question.
    – Andrew B
    Jul 8, 2013 at 22:52
  • Hi @Andrew. I've already created a question and here is the link: serverfault.com/questions/521800/… Thank you very much for the response.
    – Carlo
    Jul 9, 2013 at 6:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.