4.8. AD DN Plug-in Attributes

The AD DN plug-in supports multiple domain configurations. Create one configuration entry for each domain. For details, see the corresponding section in the Red Hat Directory Server Administration Guide.

4.8.1. cn

Sets the domain name of the configuration entry. The plug-in uses the domain name from the authenticating user name to select the corresponding configuration entry.
Parameter Description
Entry DN cn=domain_name,cn=addn,cn=plugins,cn=config
Valid Entry Any string
Default Value None
Syntax DirectoryString
Example cn: example.com

4.8.2. addn_base

Sets the base DN under which Directory Server searches the user's DN.
Parameter Description
Entry DN cn=domain_name,cn=addn,cn=plugins,cn=config
Valid Entry Any valid DN
Default Value None
Syntax DirectoryString
Example addn_base: ou=People,dc=example,dc=com

4.8.3. addn_filter

Sets the search filter. Directory Server replaces the %s variable automatically with the non-domain part of the authenticating user. For example, if the user name in the bind is user_name@example.com, the filter searches the corresponding DN which is (&(objectClass=account)(uid=user_name)).
Parameter Description
Entry DN cn=domain_name,cn=addn,cn=plugins,cn=config
Valid Entry Any valid DN
Default Value None
Syntax DirectoryString
Example addn_filter: (&(objectClass=account)(uid=%s))