LDAP schema: extend one branch with another branch

350 views Asked by At

I'm using OUD 12c and I would like tho achieve something like the following. Suppose I have two branches in my LDAP:

ou=users,dc=example,dc=com
ou=users_special,dc=example,dc=com

Is it possible to set on LDAP side that ou=users_special extends the ou=users branch? So every search in the ou=users branch will automatically look even at the ou=users_special.

Note: no, I can't search for the users in the base dn. Thanks

EDIT:

I try to re-explain because it seems the goal was not clear. I have two users with these two DN:

uid=user0,ou=people,dc=example,dc=com
uid=user1,ou=users,dc=example,dc=com

I need that both of these ldapsearches work.

ldapsearch -h localhost -p 1389 -b "ou=people,dc=example,dc=com" (uid=user0)
ldapsearch -h localhost -p 1389 -b "ou=people,dc=example,dc=com" (uid=user1)
1

There are 1 answers

5
LisaJ On BEST ANSWER

That's not schema -- schema defines what attributes exist on an object. You're talking about a referral.

The following LDIF creates an OU with a referral:

dn: ou=users_special,ou=users,dc=example,dc=com
changetype: add
objectclass: top
objectclass: extensibleObject
objectclass: referral
ou: users_special
ref: ldap://LDAPHOST:PORT/ou=users_special,dc=example,dc=com??sub?(objectClass=inetOrgPerson)

I created a user with uid "specialuser01" in ou=users_special,dc=example,dc=com. A query set to follow referrals at base ou=users,dc=example,dc=com for uid=specialuser01 returns the account that is in the

***Searching...
ldap_search_s(ld, "ou=users,dc=example,dc=com", 2, "uid=specialuser01", attrList,  0, &msg)
Getting 1 entries:
Dn: uid=specialuser01,ou=users_special,dc=example,dc=com
cn: special User01; 
objectClass (4): top; person; organizationalPerson; inetOrgPerson; 
uid: specialuser01; 

However a search that doesn't follow referrals will return 0 entries.