Add secondary AD DS for ldap query

[levante27]

Hi all.
We configure the /opt/otrs/Kernel/Config.pm file for use a windows 2012 DC ldap service (and it works fine!!).
We need to add a secondary DC, how we can do this?
Our configuration is:

# This is an example configuration for using an MS AD backend
$Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
$Self->{'AuthModule::LDAP::Host'} = 'dc01.domain.dom';
$Self->{'AuthModule::LDAP::BaseDN'} = 'dc=domain,dc=dom';
$Self->{'AuthModule::LDAP::UID'} = 'sAMAccountName';

# Check if the user is allowed to auth in a posixGroup
# (e. g. user needs to be in a group OTRS_Agents to use otrs)
$Self->{'AuthModule::LDAP::GroupDN'} = 'CN=OTRS_Users,CN=Users,DC=domain,DC=dom';
$Self->{'AuthModule::LDAP::AccessAttr'} = 'member';
$Self->{'AuthModule::LDAP::UserAttr'} = 'DN';

# Bind credentials to log into AD
$Self->{'AuthModule::LDAP::SearchUserDN'} = 'CN=user,OU=Services,OU=Users,DC=domain,DC=dom';
$Self->{'AuthModule::LDAP::SearchUserPw'} = 'password';

# in case you want to add always one filter to each ldap query, use
# this option. e. g. AlwaysFilter => '(mail=*)' or AlwaysFilter => '(objectclass=user)'
$Self->{'AuthModule::LDAP::AlwaysFilter'} = '';

# in case you want to add a suffix to each login name, then
# you can use this option. e. g. user just want to use user but
# in your ldap directory exists user@domain.
$Self->{'AuthModule::LDAP::UserSuffix'} = '';

# Net::LDAP new params (if needed - for more info see perldoc Net::LDAP)
$Self->{'AuthModule::LDAP::Params'} = {
port => 389,
timeout => 120,
async => 0,
version => 3,
};

Thanks!

[crythias]

read about multiple backends in the docs.

For every key in the additional backend, an consistent index (number) must be appended.
$Self->{'AuthModule1'}
$Self->{'AuthModule::LDAP::Host1'}

etc.