How to properly configure Base DN when using Internal Directory with LDAP Authentication

Jim Walker4

We are using an Internal Directory with LDAP Authentication. The Directory Type is Microsoft Active Directory. I am a newbie to using AD for LDAP Authentication.

We have users in the US and their "domain" is "amer.company.com", and users in the UK and their "domain" is "emea.company.com".

When I set the Base DN as "dc=company,dc=com", then all US and UK users can login, but there is a 5-10 second delay while authenticating.

When I set the Base DN as "dc=amer,dc=company,dc=com", then only US can login, and there is insignificant delay while authenticating.

Can someone suggest a better configuration so US and UK users can login with minimal delay?

JamieA

Just a simple suggestion really, but why not create two directories? This should be fine providing you're using local groups.

The problem is probably something to do with referrals or hitting the wrong DC, but you will need an LDAP admin to help you with that I would think.