On 17 July 2012 16:06, Aaron Richton richton@nbcs.rutgers.edu wrote:
On Tue, 17 Jul 2012, Pieter Baele wrote:
Given databases:
--- dc=common,dc=example,dc=org --- dc=shared,dc=example,dc=org --- dc=companyA,dc=example,dc=org --- dc=companyB,dc=example,dc=org --- dc=companyC,dc=example,dc=org
all slaves represent this as "dc=example,dc=org"
it looks like a really good situation for a simple glue configuration using the "subordinate" keyword; see slapd.conf(5).
What lives under ou=CompanyA etc? User accounts? Something we do for this to keep the DIT level shallow, is to keep all user accounts in ou=Users and filter based on o=CompanyA which is an attribute on that user entry. Then you can use slapo-dynlist to create company groups etc.
Not sure what ACLs you've got or the overall function of your directory server to advise a new DIT.
Thanks.