Re: Binding when following a referral

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 01:58 PM 2/1/01 -0500, Paul Corazzol wrote:
>I am trying to follow a referral when I bind.  First I use
>ldap_search_s to see if a user exists, grab the DN and password for the
>user, kill
>my ldap session, open a new one, and try to bind to the server with the
>retrieved DN and password.

I note that if you are using LDAPv3, the close/open after the
search is unnecessary.

>If the DN is on a referral server, I get a
>LDAP_NO_SUCH_OBJECT error, but, if it doesn't have to follow a referral,
>it works fine.  I am using the Microsoft LDAP API.  What piece am I
>missing?

I am not too sure exactly what is occurring, sounds like:
(C == Client, S == initial server, R == server referred to by S)

C->S: search
C<-S: result DN
C->S: unbind
C->S: bind DN
C<-S: referral ldap://R/
C->R: bind DN
C<-R: result noSuchObject

Seems like S is telling you to go to R but R doesn't known
that DN (invalidCredentials would be a more appropriate result
code).   That just seems like a disconnect between what S and
R think about the DN.

Kurt