https://community.cisco.com/t5/network-security/ldap-realm-base-and-group-dn/m-p/3990700#M934984 <P>I generally configure the realm using DN closest to the base. Generally your device will be able to move down the tree as needed.</P> Thu, 28 Nov 2019 11:45:23 GMT Marvin Rhoads 2019-11-28T11:45:23Z https://community.cisco.com/t5/network-security/ldap-realm-base-and-group-dn/m-p/3989456#M934983 <P>FTD and FMC version 6.4.0.</P><P>For LDAP Realm integration is there any security concerns with having the base and group DN set to base of the directory tree - example: "dc=company,dc=com,dc=au"?</P><P>&nbsp;</P><P>I have users in a few OU's under the base DN "dc=company,dc=com,dc=au", so instead of duplicating the config and having multiple realms, can I just have one realm with base and group DN as&nbsp;"dc=company,dc=com,dc=au", so it will cover all users that are in different OU's?</P> Fri, 21 Feb 2020 17:43:26 GMT https://community.cisco.com/t5/network-security/ldap-realm-base-and-group-dn/m-p/3989456#M934983 Madura Malwatte 2020-02-21T17:43:26Z https://community.cisco.com/t5/network-security/ldap-realm-base-and-group-dn/m-p/3990700#M934984 <P>I generally configure the realm using DN closest to the base. Generally your device will be able to move down the tree as needed.</P> Thu, 28 Nov 2019 11:45:23 GMT https://community.cisco.com/t5/network-security/ldap-realm-base-and-group-dn/m-p/3990700#M934984 Marvin Rhoads 2019-11-28T11:45:23Z