Multiple LDAP domains

[zkirby]

I work for a company that has more than 1 LDAP domain.  Currently, users on separate domains are directed to separate intranet domain names (for example, intranet.foo.com and intranet.bar.com).  I'm curious to know how Alfresco would handle this (or if it could at all).  Does Alfresco handle the authentication process, or does it just grant authorization to previously authenticated users?

[jbarmash]

I work for a company that has more than 1 LDAP domain. Currently, users on separate domains are directed to separate intranet domain names (for example, intranet.foo.com and intranet.bar.com). I'm curious to know how Alfresco would handle this (or if it could at all). Does Alfresco handle the authentication process, or does it just grant authorization to previously authenticated users?

When properly configured to authenticate against LDAP, Alfresco defers the authentication to LDAP.   For several domains, you could chain several LDAP authentication domains together, and it will try each in sequence until either it finds a domain that can authenticate, or it goes through all of them and thenfails.

More detail at:
   http://wiki.alfresco.com/wiki/Enterprise_Security_and_Authentication_Configuration

For chaining example, In the extension directory, take a look at:

chaining-authentication-context.xml.sample