suppose i have a user dn in o=client1 subtree as
uid=roger,o=client1,dc=example,dc=com

and another user's dn in client2 subtree as
uid=roger,o=client2,dc=example,dc=com

The "uid" attribute is what sets the username for logging in. "uid" must be globally unique in the LDAP tree. Note that the user lookup just searches the entire tree for a "uid" attribute matching the user trying to log in. It does *not* pay attention to what DN that UID is in, as long as the DN is part of the qmail-ldap tree. What I do is something like:


[EMAIL PROTECTED],o=accounts,dc=example,dc=com
  uid: [EMAIL PROTECTED]
  mail: [EMAIL PROTECTED]

[EMAIL PROTECTED],o=accounts,dc=example,dc=com
  uid: [EMAIL PROTECTED]
  mail: [EMAIL PROTECTED]

There are certainly many other ways that work, though.

Good luck.
 - Jason



Reply via email to