Thanks for the quick responses

Why I started to looks at referrals:
We are providing users with the config for setting up LDAP integration
One of the config parameters is "Ldap deref mode (never, searching,
finding, always)"
which is mapped directly to AliasDerefMode enum

And get this report https://markmail.org/message/n23y45supvgawxmw user
state referrals are not followed in his config
So I would like to write unit test for this :)

I'll check all the links and hopefully will be able to do it :))

On Thu, 16 Apr 2020 at 11:10, Emmanuel Lécharny <[email protected]> wrote:

>
> On 15/04/2020 19:48, Stefan Seelmann wrote:
> > On 4/15/20 7:14 PM, Maxim Solodovnik wrote:
> >> Thanks a lot for detailed response!
> >>
> >> My test LDAP server is created in java unit test
> >>
> https://github.com/apache/openmeetings/blob/master/openmeetings-web/src/test/java/org/apache/openmeetings/ldap/TestLdap.java#L69
> >>
> >> Shall I start 2 servers to test referrals?
> > I don't think it's required, it totally valid that referrals point to
> > the same server.
>
> You can set a referral on your own server. Just note that the search
> request will be executed using the exact same base DN, which means
> ultimately you are going to loop at some point...
>
> There are a few things to know though :
>
> - the Apache LDAP API does not support referral chasing (ie, you'll get
> the URL, but the API will not try to search it, you'll have to do it)
>
> - as a consequence, the Apache LDAP API does not stop hoping over
> referals after a limit (ie, just stop after 10 hops or whatever limit).
> This is up to you to manage a cycle.
>
> see [1] and [2]
>
>
> [1]
>
> https://issues.apache.org/jira/browse/DIRAPI-61?jql=text%20~%20%22chase%20referrals%22
>
> [2]
> https://issues.apache.org/jira/browse/DIRAPI-179?jql=text%20~%20%22chase%20referrals%22
>
>
> Emmanuel
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>

-- 
Best regards,
Maxim

Reply via email to