On 12/14/2017 10:50 AM, Betsy Schwartz wrote: > Another direction might be to set them both up as slave servers to a > primary LDAP server . We'd rather not add more authentication servers or proxies to the mix. Using the two directories directly is preferred if at all possible. -- Rich P.