Quick note:
using LDAP’s default port 389 with a Base DN of the parent Active Directory domain only shows objects from the parent domain. Changing the port to 3268 but keeping the same Base DN allows LDAP access to users from the child AD domain.

So, finally got the Openfire Jabber server to see all users from both domains.

Found via: http://www.igniterealtime.org/community/message/155746

For further reading: http://technet.microsoft.com/en-ca/library/cc978012.aspx

Kind of a lame first post, but hey, gotta start somewhere!

3 Responses to “Allowing LDAP to read users from child domain in a forest”

1. Matt Yiptong says:

   2009-07-06 at 18:49

   Unknown Unknown
   

   Test comment for fixed IP detection.

   Reply
2. Dean says:

   2013-05-28 at 12:27

   Google Chrome 27.0.1453.94 Windows 7 x64 Edition
   Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.94 Safari/537.36

   Was looking everywhere for this! Surprised it wasn’t posted in the Ignite community. Worked like a charm. Thanks!

   One more thing though, how do I hide all the computer objects? 😛

   Reply
3. Anonym says:

   2018-02-01 at 12:18

   Firefox 54.0 GNU/Linux x64
   Mozilla/5.0 (X11; Linux x86_64; rv:54.0) Gecko/20100101 Firefox/54.0

   Thanks, exactly what i needed for openvpn with nslcd with multiple domains/base 🙂

   Reply