[Date Prev][Date Next]
global ldap address book using referral
i've further my experiment on referral by trying to create a global address
i've created 3 different suffix on 3 separate databases running on the same
openldap server box:
1. o=global (used to glue the other 2 separate suffix)
a snapshot of slapd.conf looks like below:
i've added the following referrals to the first database (o=global):
dn: ref="ldap://ldap.mydomain.org/dc=domain1,dc=org", ou=domain1,o=global
dn: ref="ldap://ldap.mydomain.org/dc=domain2,dc=org", ou=domain2,o=global
using "ldapsearch -b o=global cn=*" command line utility return users from
both domain1 and domain2 (which is what i wanted). using netscape address
book directory service and setting the base as "o=global" is also able to
return search results from both domain1 and domain2.
the problem is with outlook express. it seems like outlook express is not
smart enough to chase referrals. setting "o=global" as the base for
directory service, search only shows result from domain1. it did not
traverse to domain2.
is this a known problem with outlook express or there is something wrong
with my design/configuration?
pls kindly advise how can i solve the problem for outlook express.
would really appreciate your comments/view on using such design as a glue to
create global address book via referrals. is there any potential problem
with ACL? will there be problem to administer/maintain such a design.
i've been posting questions about my test result and really hope that all
the experience ldap users here can provide feedback.