RE: [ActiveDir] LDAP in Multi-domain environments

[Gil Kirkpatrick]

Title: Message

Do you know if the app has referral-chasing turned on in the LDAP search? If it does, it should be able to start at the root and search down the tree that way.   In any case, why not just point the app to the GC; that's what its there for. Be sure to set the port properly (3268)   -gil   Gil Kirkpatrick CTO, NetPro -----Original Message----- From: Creamer, Mark [mailto:[EMAIL PROTECTED] Sent: Thursday, October 16, 2003 1:18 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] LDAP in Multi-domain environments We have some apps that make LDAP queries to allow a user to log in. Picture an "empty" root with two sub-domains. If the app is to be used only in a single sub-domain, i.e. dc=domain1,dc=company,dc=com, it works fine. If it needs to cross over to the other domain we have, though, i.e. dc=domain2,dc=company,dc=com, we're out of luck. We can't make the root dc=company,dc=com LDAP query search BOTH sub-domains for the user. Is this a limitation of LDAP, or of the apps that are trying to use it? I suspect it's the apps, but maybe there's a global (middleware?) fix someone can suggest?   If any of you are using an app called Kintana and have conquered this problem, I'd especially like to hear from you.   Thanks!   Mark Creamer Systems Engineer Cintas Corporation http://www.cintas.com Honesty and Integrity in Everything We Do