30 Sep
2013
30 Sep
'13
4:09 a.m.
On Mon, Sep 30, 2013 at 01:39:03PM +0400, 25Dollar Tech wrote:
According to my understanding, LDAP authenticates (binds) with DN (distinguish name) and password. E.g. CN=bob, OU=Users,DC=test,DC=com.
So OpenLDAP allows the same CN in a different OU.
Yes of course - that is how LDAP and X.500 are designed.
Is there any option to prevent it. ?
Use the 'unique' overlay:
http://www.openldap.org/doc/admin24/overlays.html#Attribute%20Uniqueness
Andrew
--
-----------------------------------------------------------------------
| From Andrew Findlay, Skills 1st Ltd |
| Consultant in large-scale systems, networks, and directory services |
| http://www.skills-1st.co.uk/ +44 1628 782565 |
-----------------------------------------------------------------------