RE: OpenLDAP Chaining

["Howard Chu" <hyc@highlandsun.com>]

> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Jeff Warnica

> How about proxying the requests?
>
> I have no idea if this would work, or for that matter if it
> would provide
> the performance boost you need, but there is the LDAP backend
> for slapd.
> Set up a front end server that handles the requests for your
> "dumb" client
> apps.

That would be my suggestion. Set up multiple back-ldap instances using
subordinates to glue them into a single tree. back-ldap chases referrals
automatically, so clients won't have to worry about them. The catch is that
back-ldap currently only does simple Binds on outbound connections, so if you
need some other authentication mechanism to contact the real servers, it
won't work.

> On Sun, 11 May 2003 sergiopaternoster@tiscali.it wrote:
>
> > Hi Jim,
> > unfortunately I can't modify my client apps (that do not
> manage referrals)
> > so I need a true chaining: the server follows and resolves
> any referrals
> > that it runs into during an LDAP operation. The client
> should receive only
> > the result and never knows that the referral happened. I
> know that iPlanet
> > (sunOne Directory Server) has got this feature, has
> OpenLDAP the same?
> >
>
>

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support