We have a scenario that I’m hoping OpenLDAP can offer a solution to.

We are in the process of transitioning from one ldap authentication source to another for several of our applications. During the transition we need to be able to authenticate users against one of two different ldap services. Unfortunately our applications do not support the capability to try authentication against multiple services.

Would an OpenLDAP setup be able to take the authentication request and attempt to validate it against 2 different backends?

I should note that each of the ldap backends would have different OU structures and that a given userID would not exist in both backends. Based on the slapd-meta man page SCENARIOS section it looks as though this may be possible. The examples don't illustrate whether or not the OU structures need to be the same between the backends.

Any help would be greatly appreciated!

Regards, Dan