Virtual Domains & LDAP

["Kevin J. Menard, Jr." <kmenard@WPI.EDU>]

Hey guys,

    I'm fairly new to the LDAP game. I've read the list archives a bit, and
    found a lot of good info. One thing that is still eluding me is the the
    directory structure itself.

    I am trying to set up LDAP as my backend for several services: SMTP
    (Postfix), IMAP/POP (Cyrus + pw_check patch), FTP (ProFTPd + mod_ldap), and
    HTTP (Apache + PHP + LDAP + mod_auth_ldap).  I obviously would like to host
    more than one domain <g>.  (I know this could be accomplished with ISPMan,
    but I'm trying to learn how to use the technology itself).

    What would be the best structure for this?

    I was thinking something like:

    o = my_organization -- domain1
                        -- domain2
                        -- domainN
                        -- Admins -- LDAP Admin
                        -- Users

    I figured lumping all the users together would make it easier for searches,
    since there would only be one base.

    However, I was also thinking of something like this:

    o = my_organization -- domain1 -- Users
                        -- domain2 -- Users
                        -- domainN -- Users
                        -- Admins -- LDAP Admin

    With this system, I figured each domain could be within its own namespace,
    and I like this approach better, due to the more natural organization of
    things.  However, being split up like that, I would think searches would be
    agonizingly slow.

    Anyone out there do something similar?  Please share any insight
    (structures, sample LDIF, config files, etc.)  Thanks a lot.
    
-- 
 Kevin