LDAP search failed

Michael Ströder michael at stroeder.com
Tue Jul 7 16:03:48 CEST 2015


Hatim CHIKHI wrote:
> I found the solution for the ldap slow search here:
> http://lists.freeradius.org/pipermail/freeradius-users/2013-January/064566.html
> 
> There is just an option in the ldap configuration of freeradius that must
> be modified:
> 
> ldap {
>    ...
>    chase_referrals = no
> }

I'd vote for this to be the default. Automagically chasing referrals is
useless in almost any case, especially because it's a broken concept. At least
I never had a LDAP deployment where this was safe to use - during the last 15+
years.

Ciao, Michael.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4272 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20150707/2c52ae89/attachment.bin>


More information about the Freeradius-Users mailing list