----- "Hallvard B Furuseth" h.b.furuseth@usit.uio.no wrote:
Use multiple databases.
Yes, that's often the best way.
Still it is more cumbersome to maintain more databases. And there are some things that need a single database, like references between the two subtrees. (Aliases - which one should avoid anyway, possibly groups, I don't remember.)
I think time would better be spent in making useful things work across databases rather than revitalizing multiple suffixes in a single database. Another approach consists in making the database rooted at "", hiding "dc=org" and "dc=com" via ACLs.
p.
Ing. Pierangelo Masarati OpenLDAP Core Team
SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando@sys-net.it -----------------------------------