<quote who="Marcin Giedz">
Is there any way to do something like this without copying all data many times.
- there is entry: uid=user1,ou=people,dc=xx,dc=x
The entry has objectClass = person, posixAccount etc.. So there is attribute userPassword.
- there are entries:
mail=user1@dom1,ou=domains,dc=xx,dc=x mail=user1@dom2,ou=domains,dc=xx,dc=x mail=user1@dom3,ou=domains,dc=xx,dc=x,
I think your design is a bit strange. Why not have these mail attributes as part of the user entry like:
mail: ghenry@suretec.org mail: ghenry@suretecsystems.com
And then do your search. You then only need one userPassword.
however I had to copy some attributes from uid=user1,ou=people,dc=xx,dc=x like userPassword (with objectClass') to every entry @dom1,@dom2,@dom3 to be able to authenticate such user.
Now I'm wondering if there is any way to NOT copy attribute userPassword (and others) to @dom1.... but rather "create" reference to uid=user1,ou=people,dc=xx,dc=x in every @domX so when ldapsearch is performed I will be able to get userPassword using filter (mail=user1@dom1) and authenticate user1?
Regards, Marcin
-- ARISE M.Giedz, T.ŻebruŠsp.j. http: www.arise.pl mail: giedz@arise.pl tel: +48 502 537 157