(ITS#7593) Openldap - MySQL | Issue with displaying list of users from same domain

[sandeeps@rediff-inc.com]

Full_Name: Sandeep Singh
Version: openldap-2.4.35
OS: CentOS Linux release 6.0
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (202.137.232.113)


Hello,

 

We have configured an openldap server with mysql as the backend. It is working
fine as well.

 

We have a scenario where we feel it is not behaving the way it is required. 

 

We have multiple domains say:-

1)       abc.com

2)       xyz.com

 

Have mapped user as:-

1)       mail=man1@red.com,dc=abc,dc=com with password=man1r

2)       mail=man2@red.com,dc=abc,dc=com with password=man2r

3)       mail=man1@sad.com,dc=xyz,dc=com with password=man1s

4)       mail=man2@sad.com,dc=xyz,dc=com with password=man2s

 

 

When we search for result using:-

 

ldapsearch -x -D "mail=man1@red.com,dc=abc,dc=com" -W -b "dc=abc,dc=com"

 

It gives us output / result shown is of domains abc.com i.e.
?mail=man1@red.com,dc=abc,dc=com & mail=man1@red.com,dc=abc,dc=com? ? Which is
correct

 

 

But when we search for results using:-

 

ldapsearch -x -D "mail=man1@red.com,dc=abc,dc=com" -W -b "dc=xyz,dc=com"

 

Then the output / result shown is of domain xyz.com i.e. 
?mail=man1@sad.com,dc=xyz,dc=com & mail=man2@sad.com,dc=xyz,dc=com? because the
base search is ?dc=xyz,dc=com? ? Which is not correct as
mail=man1@red.com,dc=abc,dc=com does not belong to xyz.com domain

 

So we want to authenticate and  display user along with the list of other users
from the same domain and not from the other domain.

 

Please suggest how to overcome / solve the issue.