Hi... After a while I got my 389ds ldap now up and running for users accounts, groups, dns and dhcp. Everything fine fast and stable (even I am running it on OpenSuse). But I got a question on how to realize a certain idea with 389ds. I got a central LDAP directory. It contains all data. I am having different subnets but want to have a central user management. Each subnet has different dedicated servers for user homeaccounts and each subnet has its own ldap server (replication consumer) to which each subnet referrs to. This is due to security/fault tolerance considerations and also due to different subsidiaries with sometimes slow network connection. Example User "John": He logs in in subnet A (eg from IP 192.168.1.100): Unix homeaccount: /Servers/SubnetAServer/Users/John Samba homeaccount: \\SubnetAServer\Users\John He logs in in subnet B (eg from IP 192.168.2.100): Unix homeaccount: /Servers/SubnetBServer/Users/John Samba homeaccount: \\SubnetBServer\Users\John (It is not possible to mask the servername for each subnet to be the same by dns). Means the ldap search needs to return different attribute values when the search is performed from different subnets (all other values - like uids - shall remain constant). I don't want to have different user trees. User sometimes travel from subsidary to subsidary or are using different subnets at the same time. Can this be done by views or class of service or some other tricks/plugins? Has anyone done this already? Thanks in advance, Roland -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.fedoraproject.org/pipermail/389-users/attachments/20100518/41ea11af/attachment.html
