Thank you Viktor.
Your info was very useful.
11.06.2012 23:15, Viktor Dukhovni пишет:
On Mon, Jun 11, 2012 at 08:11:08PM +0000, Viktor Dukhovni wrote:
On Mon, Jun 11, 2012 at 09:52:59AM -0700, Quanah Gibson-Mount wrote:
--On Monday, June 11, 2012 12:34 PM +0000 Viktor Dukhovni
<postfix-us...@dukhovni.org> wrote:
So this SRV syntax is not available to applications that use
OpenLDAP, for example Postfix.
I would like to see proper SRV-based LDAP URIs in the OpenLDAP
library, based on correctly formed escaping rules. Sadly the support
for these is a half-baked hack in the command-line utilities.
SRV handling is in:
libldap/dnssrv.c
LDAP URI handling via SRV records is not in the library. In
particular, an OpenLDAP library client that specifies a
(correctly formed or otherwise) LDAP URI of the form:
ldap:///dc=example,dc=com/
will not be connected to the LDAP servers found in the SRV records
for _ldap._tcp.example.com. That code is only in the ldapsearch(1)
and related tools.
In OpenLDAP 2.4.23 the code in question is in clients/tools/common,c
in the tool_conn_setup() function, which is not part of the OpenLDAP
library. If the OpenLDAP in Debian Squeeze is not sufficiently
recent, my apologies, but most users using the OpenLDAP in their
OS distribution are probably running something of similar vintage.
--
С уважением,
Павел Бычихин
КП "ХТС"
тел. (057) 758-84-12
