Configuring pass-through authentication to LDAP servers - PingDirectory - 9.2

The following example creates two LDAP external servers.

dsconfig create-external-server \
     --server-name ds1.example.com:636 \
     --type ldap \
     --set server-host-name:ds1.example.com \
     --set server-port:636 \
     --set connection-security:ssl \
     --set key-manager-provider:Null \
     --set trust-manager-provider:JKS \
     --set authentication-method:none

dsconfig create-external-server \
     --server-name ds2.example.com:636 \
     --type ldap \
     --set server-host-name:ds2.example.com \
     --set server-port:636 \
     --set connection-security:ssl \
     --set key-manager-provider:Null \
     --set trust-manager-provider:JKS \
     --set authentication-method:none

dsconfig create-pass-through-authentication-handler \
     --handler-name LDAP \
     --type ldap \
     --set server:ds1.example.com:636 \
     --set server:ds2.example.com:636 \
     --set server-access-mode:round-robin

dsconfig create-plugin \
     --plugin-name "Pluggable Pass-Through Authentication" \
     --type pluggable-pass-through-authentication \
     --set enabled:true \
     --set pass-through-authentication-handler:LDAP