Re: Basic Cert-2-Directory mapping question

[Michael Ströder <michael@xxxxxxxxxxxx>]

"Slone, Skip" wrote:
> 
> By way of example, what I'm talking about is the ability to
> take a DN of the form "cn=Skip Slone, o=Lockheed Martin, c=US" and
> determine that the LDAP server to check is found at (for example)
> ldap1.external.lmco.com.

Could be done with LDAPv3 referrals from your default LDAP server to
the target LDAP server holding the entry (e.g. described on
http://www.terena.nl/projects/direct/ for country-level
directories). I'm pretty sure Janus Liebregts and David Chadwick
know more about it.

Ciao, Michael.