Forum Discussion

ehergott_345008's avatar
ehergott_345008
Icon for Nimbostratus rankNimbostratus
Oct 16, 2018

Multple VPE LDAP SearchDN entries

I have an LDAP query set up in VPE. I is working using the SearchDN I inserted. However I would like to add a second Search DN into this field. Is this possible? Basically I just want to search a second OU without having to open it up to a larger AD tree. My hope would be to have some thing like this:

 

OU=Accounts,DC=domain,DC=domain

 

OU=Users,DC=domain,DC=domain

 

Just not sure if having multiple will work, and if this format will work or if I need to use an operator of some sort.

 

application delivery
BIG-IP Access Policy Manager (APM)
ldap authentication
  • Nicolas_Destor's avatar
    Nicolas_Destor
    Icon for Cirrostratus rankCirrostratus
    Oct 16, 2018

    Hi,

     

    The searchDN must be the lowest common RDN, in your case "DC=domain, DC=domain". It's not possible to give two differents searchDN for the same LDAP query.

     

    It is possible however to filter on the OU by using the SearchFilter field, with this syntax:

     

    (|(OU=Accounts,DC=domain,DC=domain)(OU=Users,DC=domain,DC=domain))