GIT Log for 2009-04-02 23:33 GMT
commit 90c05e048d12082ce91e2baece1c1f90f265867d Author: Alan T. DeKok <aland@freeradius.org> Date: Thu Apr 2 13:45:51 2009 +0200 Added "rebind" option to re-authenticate on rebind Also, change chase_referrals default to unset. This allows us to use the OpenLDAP default, OR to force it on/off. rebind is done only when chase_referrals is true, AND rebind is true Files changed: ====================================================================== commit e428b72171c57473bed5ccb1575e408cca07acfb Author: Alan T. DeKok <aland@freeradius.org> Date: Thu Apr 2 11:45:41 2009 +0200 Added chase_referrals option Files changed: ====================================================================== commit f60fe639e7562df9a710ab319f347e5934b92738 Author: Alan T. DeKok <aland@freeradius.org> Date: Thu Apr 2 11:21:03 2009 +0200 Note limitations with -n Files changed: ======================================================================
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 aland wrote:
commit 90c05e048d12082ce91e2baece1c1f90f265867d Author: Alan T. DeKok <aland@freeradius.org> Date: Thu Apr 2 13:45:51 2009 +0200
Added "rebind" option to re-authenticate on rebind
Also, change chase_referrals default to unset. This allows us to use the OpenLDAP default, OR to force it on/off.
rebind is done only when chase_referrals is true, AND rebind is true
Files changed:
====================================================================== commit e428b72171c57473bed5ccb1575e408cca07acfb Author: Alan T. DeKok <aland@freeradius.org> Date: Thu Apr 2 11:45:41 2009 +0200
Added chase_referrals option
Files changed: Does the OpenLDAP library explicitly support chase_referrals, or is there code already in rlm_ldap to do this ? In the past when i've had to use wrappers around OpenLDAP, you always had to specify a callback function that OpenLDAP called whenever it hit a referal. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAknVx7YACgkQcaklux5oVKLgbACfegGLdrMxfVLzr3exOHVDAUI9 trwAn3O9J49iyruwWyo4eehNqEEEVTkB =KLx0 -----END PGP SIGNATURE-----
Arran Cudbard-Bell wrote:
Does the OpenLDAP library explicitly support chase_referrals, or is there code already in rlm_ldap to do this ? In the past when i've had to use wrappers around OpenLDAP, you always had to specify a callback function that OpenLDAP called whenever it hit a referal.
The documentation says that "chase referrals" is the default. However, the callback is required if you want the referral to use the same credentials as the original bind. Because it just wouldn't make sense for it to use the *same* credentials. Active Directory gets excited over this. If you get a referral to the same machine, it works. If you get a referral to a different machine, OpenLDAP binds anonymously, and therefore doesn't have the correct permissions to do the search. Alan DeKok.
participants (3)
-
Alan DeKok -
aland＠deployingradius.com
-
Arran Cudbard-Bell