RE: [ActiveDir] LDAP in Multi-domain environments

[Mulnick, Al]

Title: Message

depends on what you're searching for in the app.  What's the app and what's it searching for.   Remember GC's are going to hold some of the information these apps are looking for.     Al -----Original Message----- From: Creamer, Mark [mailto:[EMAIL PROTECTED] Sent: Thursday, October 16, 2003 4:18 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] LDAP in Multi-domain environments We have some apps that make LDAP queries to allow a user to log in. Picture an "empty" root with two sub-domains. If the app is to be used only in a single sub-domain, i.e. dc=domain1,dc=company,dc=com, it works fine. If it needs to cross over to the other domain we have, though, i.e. dc=domain2,dc=company,dc=com, we're out of luck. We can't make the root dc=company,dc=com LDAP query search BOTH sub-domains for the user. Is this a limitation of LDAP, or of the apps that are trying to use it? I suspect it's the apps, but maybe there's a global (middleware?) fix someone can suggest?   If any of you are using an app called Kintana and have conquered this problem, I'd especially like to hear from you.   Thanks!   Mark Creamer Systems Engineer Cintas Corporation http://www.cintas.com Honesty and Integrity in Everything We Do