Some organizations are large enough to use multiple Windows domains (sub-domains) in their networks. Each Windows domain can have its own LDAP server.
In previous releases, identity manager supported up to eight LDAP servers which are assumed to be replicas on the same domain (default base-dn). From the 15.2 release, identity manager supports multiple Windows domains.
In 15.2, identity manager can service users under different domains. You can configure different domains and add different LDAP servers for these different domains. When adding an LDAP server to identity manager, you can specify the domain under which the server is to be added.
You can now add up to eight LDAP servers to each of the user-configured domains.
Identity manager tries to maintain LDAP connections with one of the servers in each of the configured domains. LDAP queries for users logging on to those domains will be sent to the respective servers or to a server on the default domain if the user does not fall under any configured domain. The LDAP server might choose to close the connection after a timeout.
Identity manager tries to bind to one of the configured LDAP servers in each of the user-configured domains.
When a new user is detected, the user‘s domain is used to determine the LDAP server to be contacted for the user‘s details.
If there is a match, the LDAP server corresponding to that domain is chosen and the LDAP search request for the user attributes is sent to that LDAP server.
If the domain does not match any of the configured domains, LDAP query is sent to a server in the default domain.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB