PAM stack [auth and account] with distinct binddn

[danielpc]

Hello

Im trying to configure the pam stack in a way that both "auth" and "account" points to the same ldap but each one with a distinct binddn.

Example:

When ldap client does the authentication, use a binddn like uid=proxy,dc=domainA,dc=com
When ldap client search for profile, use a binddn like uid=proxy,dc=domainB,dc=com

I need this due to a pass-through authentication on Ldap that triggers only with a specific binddn.

Does anybody here help me on this?
Crazy ideas are well accepted.

Thanks in advance

Daniel