<html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> Roman Naumenko said the following, on 02-11-14, 22:20: <blockquote cite="mid:5456F46D.1060304@naumenko.ca" type="cite"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> Hi, Similar question was asked already, " <meta charset="utf-8"> Limiting group/user visibility" at <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/archives/freeipa-users/2011-November/msg00277.html">https://www.redhat.com/archives/freeipa-users/2011-November/msg00277.html</a> but other than this I couldn't find any clues if that's possible. If I was to manage separate organizations with own users, computers and other entries in one ipa server - would such scenario be possible? </blockquote> I found relevant information, at least about directory structure, in red hat directory server docs: <a class="moz-txt-link-freetext" href="https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Configuring_Directory_Databases.html#Configuring_Directory_Databases-Creating_and_Maintaining_Suffixes">https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Configuring_Directory_Databases.html#Configuring_Directory_Databases-Creating_and_Maintaining_Suffixes</a> Since RH package is based on 389 directory server, which is part of freeipa - I wonder if its possible to maintain independent root suffixes? --Roman </body> </html>