Sponsored development rlm_ldap and ocsp

[Stephan Jäger]

Am 20.08.2010 18:43, schrieb John Dennis:
> Attached is a git format patch which adds support for storing clients in
> LDAP. The necessary schema can be found in
> doc/examples/389_ds_schema.ldif. This is schema ldif file suitable for
> use with 389-ds (the standard LDAP server shipped with Fedora and RHEL
> which over the years with different versions has been known under a
> variety of names, Netscape Directory Server, iPlanet, Sun Directory
> Server, Red Hat Directory Server, Fedora Directory server).

There seems to be a problem if you have more than one client in LDAP.

perform_search() says:

DEBUG(" [%s] got ambiguous search result (%d results)", inst->xlat_name,
ldap_errno);

clears the result and returns with RLM_MODULE_NOTFOUND if you have 0 or
> 1 entries in the result set.

Not sure what the consequences are if you just remove the >1 entries in
the result set check in perform_search...


Stephan