RE: DefaultSearchBase / ForceSearchBase

["Howard Chu" <hyc@highlandsun.com>]

Support for suffixalias was dropped in 2.1.6. (Six, not sixteen!) If it ever
returns, it will be sometime in the 2.2 releases. In this particular case you
can fix the problem using back-ldap to forward requests from the bad
searchbase to the correct one. But it would be smarter for you to fix the
clients.

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support

> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Mathias
Meisfjordskar

> [ Jon Mitchiner ]
>
> > Unfortunately, there are broken clients out there (specifically,
> > Microsoft) that send a default search base, such as "c=US", "c=UK",
> > among other things. To make matters complicated, some of our users
> > have a search base that is set up incorrectly.
> >
> > Instead of attempting to fix the users, I am wondering if it would
> > be a good idea to add in a 'feature' to OpenLDAP, especially if the
> > directory structure is simple. The new feature I'd like to see would
> > be called "ForceSearchBase".
>
> ForceSearchBase whould break referals. Not good.
>
> If you have problems with wrong search bases, try "suffixalias". man
> slapd.conf should give you the details. It's a hack, but having all
> your Outlook-users banging on your door is worse. :)
>
> --
> Mathias Meisfjordskar
> GNU/Linux addict.
>
> "If it works; HIT IT AGAIN!"
>