About mapping multiple source DNs to the same target DN

Some complications exist when defining multiple distinguished names (DN) mappings that are used for the same request processor and the same source or target DN or that have source or target DNs that are hierarchically related.

The client request might not include enough information to disambiguate and determine the proper rule to follow.

Several solutions exist to avoid problems of disambiguation. If the client does not need to be able to see all mappings at the same time, then a new client connection policy can be created to use connection criteria that select the set of mappings applied to the client based on information such as the IP address or bind DN. Each client connection policy would have separated subtree views with separate proxying request processors that reference the appropriate transformation for that client.

Alternatively, if it is unnecessary to search under the o=sample base DN, then you can create separate subtree views in the same client connection policy. For example, you would create one subtree view for ou=east,o=sample and one for ou=west,o=sample. Each subtree view is then associated with its own proxying request processor, one for ou=east requests and one for ou=west requests.