# Example: One Authentication is Sufficient

In this example, a user is authenticated against multiple LDAP branches. If authentication fails in the first branch, the second is tried. Only one module instance needs to succeed for the user to be authenticated.

This behavior is controlled by the sufficient Flag.

    EMSUserAuthentication {
        com.tibco.tibems.tibemsd.security.jaas.LDAPSimpleAuthentication sufficient
        tibems.ldap.user_pattern="uid=%u,ou=People,dc=Local"
        tibems.ldap.url="ldap://localhost:389" ;
        com.tibco.tibems.tibemsd.security.jaas.LDAPSimpleAuthentication sufficient
        tibems.ldap.user_pattern="uid=%u,ou=People,dc=Remote"
        tibems.ldap.url="ldap://localhost:389" ;
    };

Copyright © Cloud Software Group, Inc. All rights reserved.