LDAP Configuration - Multiple domains

I have a domain called SA and I have subdomains called IL,NY,TX with corresponding users in the subdomain.It is a deep hierarchy.I want to bring all the users from all these subdomains.
Below is my environment,
User path: ou=users,ou=test,dc=IL,dc=SA
User path: ou=users,ou=map,dc=NY,dc=SA
User path: ou=users,ou=temp,dc=TX,dc=SA
If I give a single path, I am able to bring all the LDAP users. What do I need to do to bring all the users from all the subdomains in EP60.

Dear Anonymous User -
Have you tried configuring the connection to the LDAP to use port 3268 instead of 389? Also, you may need to point to the domain controller instead of one of the sub-domains.
Additionally, you'll want to ensure that the users are unique amongst all of the sub-domains. If not, you'll find that users may experience intermittant behaviour.
Finally, you could also configure the portal to use multiple LDAPs, and treat each of th sub-domains as a seperate LDAP even though they physically exist on the same server.
Regards,
Kyle

Similar Messages

How to configure multiple domains in Active directory

HI,
How can I configure multiple domains on Active Directory. When I installed AD it asked for a domain name, there I gave ravigupta.com as domain name. But now I find no way of creating another domain.
I am a java developer and my task is to write a programme which returns all the domains available in LDAP server.
To start with ,I tried to create few domains in LDAP server ( AD ) but stuck up ,as i found there could exist only one domain.
Please tell me how to configure multiple domains in LDAP server ( Active Directory).
I skiped DNS configuration while AD installation.
-ravi

I'm sorry, but you should be asking on a different forum. This has nothing to do with Java.

LDAP and multiple domains

Currently migrating to a new domain and is there anyway to configure LDAP to use both during the migration?... We've been able to use one or the other via redirecting the LDAP Configuration Wizard and our test users but they only work for a short time then fail. I'm thinking there is a keep live period that expires, so is that a possiblity? reset the how long LDAP keeps currently populated users.

It is not possible to configure Contract Management to connect \ integrate with more than one LDAP authentication server.
This is an existing Enhancement Request:
Bug 9724986 15 ABILITY TO ENTER MULTIPLE LDAP SERVERS FOR CONTRACT MANAGEMENT
The Primavera Administrator only supports variables for a single authentication mode and authentication server.
Reference: Note 913872.1 How To: Configure / Enable LDAP Authentication using the Primavera Administrator (admincm.cmd)
This sounds like short term requirement, however, if you would like to be included on the related Enhancement Request, please create an SR to request your organization be added to the Enhancement Request.

Cisco support LDAP Authentication - Multiple Domains

Hi,
I want to change the LDAP authentication as the multiple domains and my Windows AD environment is the child trust, that mean the root DC is the "abc.com", which have the two child DCs, e.g. "us.abc.com ", "uk.abc.com"
Is it possible I just changed the LDAP auth. with user search space as the root DC is fine?
OR
I must use the "userPrincipalName" ?

But it had the collision SAMAccountName, that would have the same account name between the us.abc.com and uk.abc.com.
If I changed the "userPrincipalName" LDAP sync to CM, how about the Jabber login?

Configuring Multiple domain Email addresses in Exchange server 2013 for Send/Receive

I've setup an exchange server 2013 , I have an requirement to setup email addresses for multiple domain account.
For example - My primary email addresses - [email protected] however i need to setup multiple domain email account for single AD user.
Example
[email protected]
[email protected]
[email protected]
I was able to setup account to receive email from different users to single mailbox users however how can i send mails from other domains email address apart from primary domain email
Thank you
Benhur

Hello,
Come back and mark the replies as answers if they help and unmark them if they provide no help.
I'm marking the reply as answer as there has been no update for a couple of days.
If you come back to find it doesn't work for you, please reply to us and unmark the answer.
Cara Chen
TechNet Community Support

LDAP Authentication - Multiple Domains

I want to be able to use the built in LDAP Authentication scheme to allow authentication against multiple AD Domains... each with it's own separate Host IP/Server, and LDAP DN String. The User ID is formated the same among all Domains, so that is not a concern. I am currently authenticating against one Domain and it scans the tree successfully.
Host: xx.xx.xx.xx
DN String: %LDAP_USER%@amer.globalco.net
(amer.globalco.net is the domain)
How can this be accomplished? Is it possible all you guru's out there?
I saw one forum thread discussing how to add a drop down list to the login page, then use the value of the page item in the DN String to specify Domain... That makes sense - HOWEVER - I also have to use a different Host Server / IP address for each domain as well.... Now that is 2 fields that need updating based on one select list.
I can build the select list using "IP/Domain" - but how do I separate the two data bits in the ITEM Value into their own field values?
Can I use the ldap_dnprep function to do text editing to create two field values from one ITEM value that I can use in the standard LDAP authentication form fields?
As you can tell - I am not a SQL/PLSQL person... and I want to avoid creating my own LDAP scheme.
Please include example/suggested SQL -
Thanks in advance...
Rich
Apex v3.2.1
Oracle 10G Express

Based on prior post I had similar question and the result was to write custom auth scheme to read the values from the login page, perform auth against appropriate ldap, then return a valid session to proceed with login in apex app. In our case, the issue was having users is different branch nodes on the same ldap server but not being able to search from a common higher-level branch for some reason...
Another option you could try, not recommended as it would mean multiple pages to maintain, would be a separate login page per ldap/domain, maybe would even have to multiple apps with just a login page and then redirect to the main app... been a really long time since i've tried anything like it, just giving some options to try.

Configuring Multiple LDAP Domains

I am having trouble configuring multiple ldap domains for declarative security and form-based authentication.
I have setup another instance of Directory Server on my local machine, on a different port. I want to be able to talk to this alternate directory server for form-based authentication and roles.
I have tried to do this by following the instructions at http://docs.iplanet.com/docs/manuals/ias/60/sp3/admin/adbasica.htm#21662, but I've had no luck. Below are screenshots of my configuration. (I've attached a word document in case you don't have a HTML-enabled mail reader).

My screenshots were wrong in the e-mail below, but correct in the attached word doc.
----- Original Message -----
From: Matt Raible
Newsgroups: iplanet.ias.general
Sent: Wednesday, August 22, 2001 7:05 AM
Subject: Configuring Multiple LDAP Domains
I am having trouble configuring multiple ldap domains for declarative security and form-based authentication with iPlanet Application Server 6.0, SP3.
I have setup another instance of Directory Server on my local machine, on a different port. I want to be able to talk to this alternate directory server for form-based authentication and roles.
I have tried to do this by following the instructions at http://docs.iplanet.com/docs/manuals/ias/60/sp3/admin/adbasica.htm#21662, but I've had no luck. Below are screenshots of my configuration. (I've attached a word document in case you don't have a HTML-enabled mail reader).

How to configure multiple smtp servers per domain

Hi,
how do we configure multiple smtp servers per domain/corporate in iplanet messaging server 5.2. i wanted to do this so that i can configure some domains with virus scanning and some domains without antivirus.

Hi Martin,
Well we are trying to run a report without exactly specifying the name of reports server anywhere, e.g. in database or in form or anywhere else. Now if I do not supply a reports server name using RUN_REPORT_OBJECT, the error it displays is FRM-41211: Integration Error : SSL failure ... However if I specify the reports server name in the form, the reports run perfect. Also the name of reports server is specified in rwservlet.properties.
Now the question goes as follows:
Can I run my report from Form without specifying the name of the Reports server anywhere at all. This is so because either an in-process reports server should be picked or the one which is entered in rwservlet.properties should be pickec up by default. Please correct us if we are wrong. once we are through with it, we have to move to Oracle 10gR2 concept of reports server.
Thanks in anticipation,
Ruchi/Saurabh

Configuring Multiple LDAP Datasources in VDS

Hi,
I'm trying to configure multiple LDAP Datasources using VDS, one talking to AD and other to Novell eDir from VDS, my LDAP connection strings works well but when I start the service in VDS the service will never startup all I see is Exception null, it does not throw any exception at the same time it doesn't start up the service. I've tried configuring with signle Datasource which works fine. This is failing when I combine those two datasources into one configuration. Have any configured multiple datasources with in VDS. Not sure if you have encountered any problems.
Thanks,
Joe.P

Are you just trying to bring in two LDAP data sources or do a join between them?
Actually both I believe are considered types of joins.
You cannot just define two datasources and expect them to show up.

How to configura multiple ldap server to the sun access manager

Hi,
please help how to configure multiple ldap server to the sun access manager, for example access manager does't find the user in ldap1 then it should search in ldap2.
Thanks
Mouli

There�s no need for deleting the default amSDK based datastore because it�s needed for some default accounts.
You may try to create the datastore using the commandline (amadmin)
Have a look /etc/opt/SUNWam/config/xml/idRepoService.xml
You may also try to create amadmin account in the external ldap directory.
(Un)fortunately i�ve never tried to remove the default datastore.
-Bernhard

SCOT - Configuring multiple default domain

Hi,
Is it possible to configure multiple default domain in SCOT in a client?
I have set the default domain to e.g. "company1.com" and mails with this domain are sent out. However, mails with "company2.com" are not sent out. The message in SOST is "Delivery Attempted" and the mails were never received.
I tried setting the default domain in SCOT to "company1.com, company2.com" but it didn't work. So I'm assuming that it will only accept one default domain.
"company1.com" and "company2.com" are my subsidiary companies and not "yahoo" or "gmail" domains.
Thanks

Hi my friend
Default domain can be only one as it's called "default", which involves another setting: the SMTP mail host you define also can be only one, it can't work for 2 different mail domains.
Regards,
Effan

How do I host multiple domains on a single Messaging Server?

How do I host multiple domains on a single Messaging Server?
<p>
To host multiple domains on one Messaging Server, use the
mailAlternateAddress attribute. If you want to host two domains
(customer1.com and customer2.com) on your server mail1.domain.com,
make sure that:
The various domains (in DNS) point to the installed mail server
(you must have the MX records that
points mail for customer1.com to mail1.domain.com and
customer2.com to mail1.domain.com)
That each person receiving mail at customer1.com and
customer2.com has an appropriate mailAlternateAddress
attribute describing the appropriate email address. For
instance, John Doe can have an email address (i.e. the value
of the 'mail' attribute for the John Doe LDAP entry) of
[email protected] and receive his mail on
[email protected] (the value of the mailAlternateAddress
attribute)
With Messaging Server 3.5, mailAlternateAddress can take the
form of @mail1.domain.com. If jdoe's mailAlternateAddress is
set to @mail1.domain.com, mail sent to [email protected]
will be delivered to [email protected]

jaygatsby1123 wrote:
So what exactly am I doing with virtual hosts? There is a place for Aliases... What would I put in the "Aliases" box?
Any other host name that you want to resolve to the specified virtual host. It's quite literally an alias.
if you want www.example.com and www.example.org to end up at the same web site and you already have a virtual host — Apple refers to virtual hosts as sites — configured for www.example.com in Server.app, then you'd add www.example.org as an alias for the www.example.com virtual host (site).
Virtual hosts are implemented in a web server using some details of the HTTP or HTTPS protocol, and what the web browser (client) specified. The client gets handed an IP address or a domain name by the user, and the client then fetches the associated IP address for the target web server from the client's DNS services or local host database, and the client then connects to the IP address and passes over the text string that the user had requested — the IP address or domain name or even some local shortcut set up in the client system — via the HTTP or HTTPS protocol. The web server receives and processes this arriving text string from the client, and uses it to select which web site to render back to the web client. One subtle detail lurks here, too: the server's own DNS configuration really isn't involved in the selection of the virtual host.

Multiple domains and multiple IPs in the same MacMini Server

I am sure that this topic has been faced already but I cannot find enough information to really dig into a solution.
I have a macmini server with two IPs let say x.x.x.12 and x.x.x.13 .
The server is set up on the first IP. It has his primary zone, machine record, mail aslias and www alias.
Lets call the server domain server.domain1.com
Everything works fine I have a couple of local users and a couple of LDAP users. Just to test the machine setup.
I can send and receive emails using any of the users as [email protected]
Now I would like to have another domain, domain2.com in the same server .
The final goal is to have users under different domains. They have their own email box, calendar, etc.
It will be preferable that I can share the same username with different domains. But I can live without that option.
My first test was to have the second domain called server.domain2.com using the second IP. x.x.x.13 .
For that I created another Primary Zone with domain2.com as machine record of x.x.x.13 . To use the second IP I simply create another Ethernet interface on the macmini.
In the Mail -> Advance settings I added the host aliases as well as virtual hosting domains for domains2.com.
With this setting I can send emails as [email protected] or [email protected] but when I replay to their messages I get a "Relay access denied" error from server.domain1.com .
I also tryed another domain pointing to x.x.x.12, the same as server.domain1.com . I did not create any extra Primary Zone but the local host aliases and the virtual hosting domains.
Same issue. I can send but I get a "Relay access " error.
As you might notice I am a novice on servers settings. I just try to recreate a similar environment common to Virtual Hosting providers for my own website playground but I cannot cut through this email configuration obstacle.
Any significant meaning that can be leading me to learn how to do it will be very very appreciated . (beside lynda,com tutorials that I followed already but do not mention multiple domains for mails).
Thanks

the problem I try to solve is to manage multiple domains in one MacMini Server.
Having two IPs is secondary.
I would like that each domains has his own users with emails, iCals, Wiki and web sites.
The main problem is having emails to work for any additional domain beside the default one on the machine IP.
I also got an additional IP address to be used on the same server hoping that it make things easier but apparently is making things more difficult.

Multiple domains for tracker.js

I'm using the personalization functionality of CQ 5.4, which appears to force a request for http://localhost:4502/libs/wcm/stats/tracker.js when pages load. According to the docs at http://dev.day.com/docs/en/cq/5-4/deploying/configuring_cq.html#OSGi Configuration in the Repository , I should be able to override this URL by adding some nodes to /apps/projectName. However, my tests seem to show that doing so for one project affects all sites on the server. In production, the client has a number of domains all running on one CQ instance.
1) Is there a way to remove this request altogether without modifying any JSPs in the /libs folder, or inheriting/overriding them?
2) Is there a way to support multiple domains?
The best solution I've come up with so far is creating a generic domain like cq-tracking.clientName.com, and having all sites use that.

See the following:
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c3c45.
shtml
*Perform Multi-Domain Searches (Optional) *
*Optional.* The ASA currently does not support the LDAP referal
mechanism for multi-domain searches (Cisco bug ID CSCsj32153).
Multi-domain searches are supported with the AD in Global Catalog Server
mode. In order to perform multi-domain searches, setup up the AD server
for Global Catalog Server mode, usually with the these key parameters
for the LDAP server entry in the ASA. The key is to use an
ldap-name-attribute that must be unique across the directory tree.
server-port 3268
ldap-scope subtree
ldap-naming-attribute userPrincipalName
If global catalog server is not an option for you, you can always create two seperate SSL tunnel-groups and two seperate LDAP aaa-server groups and this would also allow you to do two AD domains (but the drawback is that you would have to inform the user which group they should select)
-heather

Kerberos - Multiple Domain logon using MS Acitve Directory (AS JAVA 7.0)

I tried to find document/steps to configure the UME LDAP data source in AS JAVA 7.0 to support multi-domains in a domain forest. Our multiple domains have bi-directionaly trust.
Based on note 994791, the video/demo only shows you how to configure this by creating one J2ee server user in each domain. Then, add data source in the UME xml file for each domain. However, in the note, it also mentioned that for a domain forest, you don't need to do this. You only need to use one j2ee server user. But it didn't provide demo / video / steps in terms of how to implement it - especially how to configure the UME in this scenario.
(I have successfully configured the system to SSO to one single domain.)

With help from Holger Bruchelt (who created blogs - Configuring and troubleshooting SPNego -- Part 1,2,3), our multiple domain logon under a global catalog is working. Use note 762419 for reference. Make sure the Java service user account you created can see users in other domain. Make sure the path you use in UME is at the top level that include all the domains. Make sure the port you use is the global port to have read-only right to all domains.

LDAP Configuration - Multiple domains

Similar Messages

Maybe you are looking for