Active Directory: How to combine several realm.searchBases

[Andreas Reichel <an...@manticore-projects.com>]

Greetings,

I have a working AD authentication and authorization, but there is a caveat: Our client has Users and Consultants in
different OUs, which do not share the same path, e.g.

realm.searchBase = "OU=Service Accounts,DC=myclient,DC=ng" and
realm.searchBase = "OU=People,DC=myclient,DC=ng"

Each for its own works (in combination with its assigned users), but when I want to lookup for all users, how to combine
it?
I have tried already:
realm.searchBase = "DC=fidelitybank,DC=ng"

but that does not work and results in LDAP error. I have also tried:
realm.searchBase = "OU=Service Accounts,DC=myclient,DC=ng", "OU=People,DC=myclient,DC=ng"

but that does not work either (but it would be an elegant idea).

Any hint or advise please?

Best regards
Andreas

Re: Active Directory: How to combine several realm.searchBases

[Lenny Primak <lp...@hope.nyc.ny.us>]

Have you tried using two different realms?

> On Jul 23, 2016, at 9:00 AM, Andreas Reichel <an...@manticore-projects.com> wrote:
> 
> Greetings,
> 
> I have a working AD authentication and authorization, but there is a caveat: Our client has Users and Consultants in different OUs, which do not share the same path, e.g.
> 
> realm.searchBase = "OU=Service Accounts,DC=myclient,DC=ng" and
> realm.searchBase = "OU=People,DC=myclient,DC=ng"
> 
> Each for its own works (in combination with its assigned users), but when I want to lookup for all users, how to combine it?
> I have tried already:
> realm.searchBase = "DC=fidelitybank,DC=ng"
> 
> but that does not work and results in LDAP error. I have also tried:
> realm.searchBase = "OU=Service Accounts,DC=myclient,DC=ng", "OU=People,DC=myclient,DC=ng"
> 
> but that does not work either (but it would be an elegant idea).
> Any hint or advise please?
> 
> Best regards
> Andreas
> 
> 
>