[Auth_ldap] Help with AuthLDAPUrl

[srk-ejunk at comcast.net]

Hello all,

I'm running into a little trouble with the way Active Directory is searched when auth_ldap runs against it. We currently have a domain and two subdomains off of that inital domain. When auth_ldap searches active directory, it also searches the sub domains. ex:

We just want it to search domain.com while NOT searching test.domain.com and test55.domain.com. Is this possbile using a filter of some sort in the AuthLDAPUrl line?

My existing line looks like this:
AuthLDAPURL ldap://dc1:389 dc2:389/DC=domain,DC=com?sAMaccountName

The actual problem we see is a large LDAP timeout when the single DC goes offline in test.domain.com or test55.domain.com.


Thanks,

Kyle