LDAP Multiple User-DN or Account Filter

English:Fess
1

We have multiple login domains for our users, such as:

  • @john-doe.com
  • @john-sto.de

Is it possible to configure LDAP to support multiple domains?

Current Configuration:

  • User-DN: %s@john-doe.com
  • Account Filter: (&(objectClass=user)(sAMAccountName=%s))

Attempts (Unsuccessful):

  1. Account Filter with OR condition:
(&(objectClass=user)(|(sAMAccountName=%s@john-doe.com)(sAMAccountName=%s@john-sto.de)))
  1. Wildcard in User-DN:
User-DN: %s@*
Account Filter: (&(objectClass=user)(sAMAccountName=%s))

Do you have any suggestions or best practices for configuring LDAP to handle multiple domains for user login?