LDAP Authentication and Lookup search base

bofh69

Is it possible to use multiple search bases as we have multiple staff ou's and dont want want to search the whole tree as we dont want student to be able to login?

ntozier

I dont think so... but you could limit the scope by have two "top" level OUs.

bofh69

I dont think so... but you could limit the scope by have two "top" level OUs.

Can you expand on what you mean by limit the scope, I see no where to do that.

ntozier

Create two top level OUs.Staff.Students.Move all "multiple" staff OUs into Staff.Move all Student OUs into Students.Define your Search Base in the plugin like:OU=All_Users,OU=Staff,DC=corp,DC=domain,DC=localnote: that this is probably not perfect,m you might not have an All Users OU for example. But since your specifying that next OU down it shouldn't search say OU=All_Users,OU=Students.

bofh69

Excellent never thought of doing it like that cheers

ntozier

We actually had to do something similar here to prevent certain people from logging in. :)