In a case, where different user accounts are scattered all over the
different LDAP servers, now when user tries to log in, the first LDAP
server is checked for that user account, if user is not found then check in
second, then third and so on. So, does this kind of architecture is
possible to be implemented via CAS?

Possible, but not practical at the middle or upper limits you mentioned. I'd say it's feasible to manage a handful of contextSource beans in your configuration; beyond that you should consider a custom component that discover the directories or source directory configuration externally.

Beyond the mechanics of how you'd do this is a much more fundamentally important question: how will you ensure uniqueness of principals across those directories? If you don't have a sound answer to that question or understand why it's important, stop now and investigate how and why that matters.

M

--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to