Last Updated: February 25, 2016
·
6.848K
· phaus

create LDAP Aliases in Openldap

Sometimes you need to have a User Entry a several levels of your LDAP Directory.
You can do this very easy, while using LDAP Aliases:


version: 1

# this is the user

dn: uid=user,ou=Accounts,dc=domain,dc=de,dc=world
objectClass: extensibleObject
objectClass: ldapPublicKey
objectClass: account
objectClass: top
objectClass: posixAccount
cn: ida
gidNumber: 1000
homeDirectory: /home/user
uid: user
uidNumber: 1000

# this is the alias

dn: uid=user,ou=Accounts,dc=domain,dc=biz,dc=world
changetype: add
objectClass: alias
objectClass: top
objectClass: extensibleObject
uid: user
aliasedObjectName: uid=user,ou=Accounts,dc=haussleiter,dc=de,dc=world

You now have the same user at two different places (all data is the same, except the DN Attribute)