ejabberd - Comments for "Multiple domains using different LDAP uidattr"

searching ldap users

dray — Wed, 14 Jan 2009 08:12:16 +0000

ewdriver wrote:

I solved the different LDAP attibutes problem, POLITICALLY. :-)
Making both domains have 'mail' attribute.
So, the mail attribute can be uid.

However, searching users in the other domain is not easy.
Is it possible to search users in other domains?

Thanks, in advance.

If your directory is AD and your domains are in the same AD forest : no problem for searching users.
If you've got different independent domains, the same account is to be used for searching accounts in all different domains.

Thanks for your advice

ewdriver — Tue, 13 Jan 2009 04:03:22 +0000

I solved the different LDAP attibutes problem, POLITICALLY. :-)
Making both domains have 'mail' attribute.
So, the mail attribute can be uid.

However, searching users in the other domain is not easy.
Is it possible to search users in other domains?

Thanks, in advance.

Not possible. See workaround

mfoss — Sat, 10 Jan 2009 19:08:41 +0000

Disclaimer: I know little about LDAP or mod_vcard_ldap.

I don't see any simple solution to your problem.

Here is a workaround: in ejabberd you can define mod_vcard_ldap with some options for the first vhost, and the module with different options for the second vhost. Check in the Guide about host_config and {add, modules}. That way you have two separa vjuds that work correctly for each domain: vjud.dom1.com and vjud.dom2.com.

Then, in dom1 enable the module mod_disco with option extra_domains and put "vjud.dom2.com". And viceversa. That way users of dom1 have in Service Discovery both vjuds. And users of dom2 have both vjuds too.

They need to perform two searches, but that's the only workaround I could find for your wacky setup :P