Can SDMS use multiple base DNs for LDAP authentication? - WKB31928
Article number: 31928
ENVIRONMENT
NuGenesis 8 SDMS
ANSWER
No, SDMS can use only one base DN for LDAP authentication. If the system must be able to find and authenticate user accounts in multiple distinct branches of the LDAP directory, then use a base DN that is common to both branches, such as "dc=domainName, dc=local".
ADDITIONAL INFORMATION
This means that when the system searches for an account, it may search across the whole directory if the root DSE object is specified as the base DN. This may impact login performance for the users. It is possible to specify filters in the "ng80ldapfilt.conf" file to filter out unnecessary results.
id31928, SDMS, SDMS8, SDMS8NU, SUPISDMS, SUPNG