Can't SNI support be added?
--
Erwann.
Le 14 janv. 2012 13:08, "Howard Chu" <hyc@symas.com> a ÃcritÂ:
>
> Ronie Gilberto Henrich wrote:
>>
>> Hello,
>>
>> I need to be able to restrict ldap ou's access based on the ldaps://FQDN used to query the ldap server.
>> Let say I have the following in my ldap server:
>> ou=domain
>> Â Â ou=raincoatcompany.com
>> Â Â ou=umbrellacompany.com
>>
>> Considering that both ldap.raincoatcompany.com and ldap.umbrellacompany.com are resolving to IP address 10.0.0.10
>> So, querying the ldap server using ldaps://ldap.raincoatcompany.com/ou=domain should grant access only to the following:
>> ou=domain
>> Â Â ou=raincoatcompany.com
>> Is there any way to accomplish that with OpenLDAP?
>
> Not possible. slapd only sees the IP address of the incoming connection, it has no way to know what DNS name was used to resolve to that address.