Hi,

we use the ldap meta backend for that purpose. You can map different directories (and of course also different branches) to one branch. See http://www.die.net/doc/linux/man/man5/slapd-meta.5.html for further information.
If you are interested I can send you our meta directory structure.

Cheers
Dieter

Sean Hussey wrote:
Hi everyone,

Specifically, I'm trying to do auth with mod_auth_ldap for Apache 2,
but I'll generalize the question to see if I'm on the right track.

We have all users that are people in ou=people.

We have all users that correspond to applications we develop in
ou=applications.

We have anonymous lookups and searching turned off.

What I'm trying to do is set up a subversion repository that will
allow authentication for users in both branches.  The wall I'm hitting
is that most authentication components want either anonymous lookups
to find the user in question and then authenticate, or a specific
branch to find the use in question.

Is this bad directory design on my part?  Should I create a dynamic
group with the particular people I want to include in this
authentication?  All users in question have one particular attribute
set, so I could create the group pretty easily.  I'm just trying to
figure out whether or not I'm heading in the right direction.

Thanks!

Sean

---
You are currently subscribed to [email protected] as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the 
SUBJECT of the message.


---
You are currently subscribed to [email protected] as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the 
SUBJECT of the message.

Reply via email to