I have a quick question regarding using multiple LDAP rolebases. In the documentation , it indicates that: Since Search Guard v24 you can alternatively configure multiple role bases (this combines and replaces the rolesearch and rolebase attribute). It goes on to give an example, using two roles…

You can add in as many as you want :slight_smile: But keep in mind that adding a lot of user- and role-bases might affect the overall performance of the LDAP authentication. We leverage caching, so the performance impact should not be huge, just a thing to keep in mind.

So in other words, the, the names for the rolebase categories (normalroles v. other) can be chosen arbitrarily. Thanks.

Using Multiple LDAP Rolebases

Search Guard

jkressin May 16, 2019, 6:34pm 5

Yes, you can choose the names freely. Will make that more obvious in the documentation.

Issues Configuring LDAP Authentication

Topic		Replies	Views
Are multiple LDAP userbases possible? Search Guard	5	1329	May 3, 2019
Ldap Authorization failure Search Guard	8	436	July 17, 2017
Ldap Security Roles Search Guard	6	484	March 11, 2021
Ldap backend roles Search Guard	4	804	July 6, 2020
SG ldap authorization Search Guard	2	494	June 30, 2020

Using Multiple LDAP Rolebases

Related topics