[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
HEADS UP: referrals and aliases
I just committed a new SLAPD implementation of referrals and aliases.
This code is rather experimental and will likely have some bugs.
Referrals are based upon the IETF LDAPext namedref draft. The code
is designed to produce either LDAPv3 or U-Mich referrals depending
on the protocol level of the client. The LDAPv3 referral
implementation is untested (as the client API doesn't yet understand
v3 references/referrals).
The alias code is also completely rewritten. Suffix aliasing has
been removed as it made responding with the corrected matched dn
nearly impossible to implement. For users wanting to alias a
suffix, you must add a backend suffix and then an alias object
for the suffix you want to alias. That is:
1) configure slapd with:
# new tree
suffix "dc=fubar,dc=com"
# old tree
suffix "o=fubar,c=us"
2) add new root:
dc=fubar,dc=com
dc=fubar
o=Fubar
objectclass: organization
objectclass: dcObject
3) add alias for old root
o=Fubar,c=US
o=Fubar
aliasedObjectName: dc=fubar,dc=com
objectclass: alias
objectclass: extensibleObject
4) search away
Note: aliases only effect searching (and only when deref is
set approriately). The old code did not enforce this behavior.