[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: OpenLDAP duplication



On Mon, Sep 30, 2013 at 01:39:03PM +0400, 25Dollar Tech wrote:

> According to my understanding, LDAP authenticates (binds) with DN (distinguish
> name) and password. E.g. CN=bob, OU=Users,DC=test,DC=com.
> 
> So OpenLDAP allows the same CN in a different OU.

Yes of course - that is how LDAP and X.500 are designed.

>  Is there any option to prevent it. ?

Use the 'unique' overlay:

	http://www.openldap.org/doc/admin24/overlays.html#Attribute%20Uniqueness

Andrew
-- 
-----------------------------------------------------------------------
|                 From Andrew Findlay, Skills 1st Ltd                 |
| Consultant in large-scale systems, networks, and directory services |
|     http://www.skills-1st.co.uk/                +44 1628 782565     |
-----------------------------------------------------------------------