I have a quick question regarding using multiple LDAP rolebases. In the documentation , it indicates that: Since Search Guard v24 you can alternatively configure multiple role bases (this combines and replaces the rolesearch and rolebase attribute). It goes on to give an example, using two roles…

You can add in as many as you want :slight_smile: But keep in mind that adding a lot of user- and role-bases might affect the overall performance of the LDAP authentication. We leverage caching, so the performance impact should not be huge, just a thing to keep in mind.

So in other words, the, the names for the rolebase categories (normalroles v. other) can be chosen arbitrarily. Thanks.

Using Multiple LDAP Rolebases

Search Guard

jkressin May 16, 2019, 6:34pm 5

Yes, you can choose the names freely. Will make that more obvious in the documentation.

Issues Configuring LDAP Authentication

Topic		Replies	Views
Are multiple LDAP userbases possible? Search Guard	5	1341	May 3, 2019
Ldap Authorization failure Search Guard	8	448	July 17, 2017
Ldap Security Roles Search Guard	5	487	February 18, 2021
Ldap backend roles Search Guard	3	810	June 15, 2020
SG ldap authorization Search Guard	1	503	June 9, 2020

Using Multiple LDAP Rolebases

Related topics