I have configured an OpenLDAP 2.4.23 as a proxy to multiple separate Active Directory, it works fine when each AD as a different suffix/search base.

I have an use case to fullfil : one application server is only able to check ONE LDAP server and it allows only to check ONE search base, and the users are in several seperate Active Directory.

So I would like to configure OpenLDAP (or any other free directory) to work as a proxy and it should try each Active Directory to find is the user exists there, if not check the next Active Directory.

I have an unique key for each user (so no problem with duplicate).

I have already tried :

  • to set multiple databases with the same suffix but openldap is not happy with that config
  • to use meta (but the search base cannot be the same for two entries)

If you have any idea how to proceed I would be grateful.

  • Is there some in-depth up-to-date book on playing with relay and rewrites ?
    – anael
    Jul 30, 2013 at 7:44

1 Answer 1


Okay found a solution :

an entry point of type meta

several subentries of type ldap with suffixmassaging.


You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .