Hello, I guess we face the same issue with out customer. And we are 100% sure that the users meaning sAMAccountNames are unique across all domains. (just 2 domains in total nowadays)
I would be happy, if anyone can be more specific about how to make such set up with Spnego credentials resolver? Thanks Lukas 2011/11/5 Marvin Addison <[email protected]> > > Does CAS support Multiple Active Directories, Our client has multiple > ldap > > repositories. > > Simple answer: yes. The long answer is that the data and > configuration of the directories matters very much in practice. I > would avoid this setup unless you can be absolutely sure that user > credentials are globally unique across all directories. For example, > if the user authentiates with sAMAccountName, then that should be > globally unique across _all_ directories. Without that guarantee, CAS > client applications may be confused about which tjones you're talking > about and may lead to impersonation problems. > > M > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
