In the release notes for 2.1.8 it says: Document "chase_referrals" and "rebind" in raddb/modules/ldap Well 2.1.7 says: # The following two configuration items are for Active Directory # compatibility. If you see the helpful "operations error" # being returned to the LDAP module, uncomment the next # two lines. # # chase_referrals = yes # rebind = yes which is no different than 2.1.8. What's different? Is this documentation somewhere? I'm especially interested in rebind. Wat's it do? Rick Rick Steeves http://www.sinister.net In reality nothing is more damaging to the adventurous spirit within a man than a secure future - Alexander Supertramp
freeradius@corwyn.net wrote:
In the release notes for 2.1.8 it says: Document "chase_referrals" and "rebind" in raddb/modules/ldap ... which is no different than 2.1.8. What's different? Is this documentation somewhere? I'm especially interested in rebind. Wat's it do?
It re-sends authentication credentials for referrals. Active Directory has a habit of referring LDAP clients to a *different* LDAP server. The client needs to re-authenticate to that server before it answers queries. Alan DeKok.
At 07:16 PM 1/26/2010, Alan DeKok wrote:
freeradius@corwyn.net wrote:
In the release notes for 2.1.8 it says: Document "chase_referrals" and "rebind" in raddb/modules/ldap ... which is no different than 2.1.8. What's different? Is this documentation somewhere? I'm especially interested in rebind. Wat's it do?
It re-sends authentication credentials for referrals.
Active Directory has a habit of referring LDAP clients to a *different* LDAP server. The client needs to re-authenticate to that server before it answers queries.
Intereesting. What errors does freeradius thrown when this occurs? (since I'm still troubleshooting my ldap woes) Rick
participants (2)
-
Alan DeKok -
freeradius＠corwyn.net