[Fedora-directory-users] Two differents suffix, only one search...

Richard Megginson rmeggins at redhat.com
Tue Apr 3 21:00:28 UTC 2007


Victor Rodriguez wrote:
> Good Afternoon:
>
> Respect to this:
>
> Richard wrote:
>   
>> Note that you can configure more than one LDAP server in the
>> nsfarmserverurl attribute of your chaining backend configuration - see 
>> the docs.
>>     
>
> I have read it the docs, but I have a question: 
>
> Can I configure another ldap server even if it is in a different domain? 
>   
Yes.
> Example:
>
> Chain 1	suffix : o=domain1
> 				network1
>
> Chain 2 	suffix : o=domain2
> 				network2
>
> When I try to connect a ldap client I need to specify one of this suffix but I would like that the search of a contact occurs on both suffix. How can I do that?
>   
I'm not sure.  But you cannot have the server search more than one base 
DN in a search.  For example:
If you have o=domain1 and o=domain2 as top level suffixes (naming 
contexts) in your server, you cannot issue one ldapsearch request to 
search both of these.

However, if you can change the base DN that the clients use, you could 
do something like this:
o=toplevel - a "real" backend
+-o=domain1 - either a referral or a chaining backend
+-o=domain2 - either a referral or a chaining backend

Referrals are the simplest, assuming all of your clients can follow 
referrals.  Then all your clients have to do is search o=toplevel.
> Regards, 
>
> Victor
> Attention:
> The information contained in this message and or attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material.  Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any system and destroy any copies.
>
> Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of The Gribbles Group.
>
> Thank You.
>
> Whilst every effort has been made to ensure that this e-mail message and any attachments are free from viruses, you should scan this message and any attachments.
> Under no circumstances do we accept liability for any loss or damage which may result from your receipt of this message or any attachment.
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20070403/85af170a/attachment.bin>


More information about the 389-users mailing list