[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Multiple Search Paths

Thanks Howard;
However, one of my prime requirements is that all setups must work with standard installations. No client customizations (ie: additional software) allowed. This envirnoment is such that we do not have that kind of control over all the clients. So I have to work to the lowest possible denominator.

And it DOES work on the Solaris client, attached to the OpenLDAP server. So I know OpenLDAP is capable of serving it up.
I thought it was a trivial thing. It's neraly something that I'd consider a basic feature, and I was just missing the syntax (not much documentation on the ldap client setup around).

Howard Chu wrote:

This is a feature that Symas added to PADL's pam_ldap and nss_ldap several
months ago. If you're using a RedHat bundled version, you need to upgrade to
PADL's current versions before you can take advantage of this feature as
RedHat (and most Linux distros) bundles very old releases of this software.
You also should be asking this on a pam or nss mailing list; please direct
followups there.

 -- Howard Chu
 Chief Architect, Symas Corp.       Director, Highland Sun
 http://www.symas.com               http://highlandsun.com/hyc
 Symas: Premier OpenSource Development and Support

-----Original Message-----
From: owner-openldap-software@OpenLDAP.org
[mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Tibbetts, Ric

This is probably a quick & simple one.
I need to set up multiple search paths for user accounts.
I have several departments in my DIT that could contain
department only
accounts, as well as a general user base. So for any given
user (within
a domain), I need to do two searches (for login authentication).

My main user base is in (for example):


With department specific accounts in:


The same condition exists with the groups, etc..

I can't seem to see both of them for login authentication from the
client. In my client (Redhat 9) ldap.conf, I have:

# The distinguished name of the search base.
base dc=eng,dc=mlb,dc=ldap-test,dc=com


nss_base_passwd         ou=People,dc=ldap-test,dc=com

On Solaris, I can specify more than one search path. How do
you do that
with Linux?

Thank you!