And just for REALLY bad list form, one more top post in case it's helpful:

This is on Windows Server 2003, and allowing anonymous bind requires a
nasty registry change which we're not comfortable with here.

To make this work, we're merging the OUs and doing the group policy a
different way - which means we'll be able to search from a base of
ou=WillsUsers,dc=willsandco,dc=com and get NO referrals.

I suspect any search using a base = the real LDAP base of the AD server
will generate referrals and will currently fail with courier-authlib
('0.61.0-1+lenny1ubuntu1' - Jaunty).

If you need authlib to search from the real base, you'll need it to be
patched as described below - no referrals or doing its own authenticated
referral chasing.

Hope this helps someone out :-)

Cheers,
-Oli



Oli wrote:
<snip>
> As soon as I set the option for not implicitly chasing referrals, I get
> the correct result.
> 
> So basically, I need to allow anonymous binds to my AD, or for
> Courier-authlib to not implicitly chase referrals, or for it to
> explicitly chase but rebind properly to each URL.
> 
> If I get a chance, I'll try to patch in an option for turning off
> implicit referral chasing from the config file.
> 
> Hope this is useful to someone :-)
> 
> Cheers,
> -Oli
> 
> 
> 

-- 
Oli Comber
Systems Developer
3aIT Limited - Official Corporate Sponsor of the British Bobsleigh Team

4-10 Barttelot Rd   Horsham   West Sussex   RH12 1DQ
M: +44 (0)77255 82405   T: +44 (0)870 881 5097   F: +44 (0)870 116 0793

3aIT Limited is a company registered in England and Wales.
CoReg: 3866698   VATReg: 771388600


Visit www.3aIT.co.uk for Design, Systems, Support

Disclaimer:
The information contained within this email is confidential and may be
legally privileged. It is intended solely for the addressee. If you are
not the intended recipient, any disclosure, copying or distribution of
this email is prohibited and may be unlawful. The content of this email
represents the views of the individual and not necessarily 3aIT Limited.
 3aIT Limited reserves the right to monitor the content of all emails in
accordance with lawful business practice. Whilst every effort is made to
ensure that attachments are free from computer viruses before
transmission, 3aIT Limited does not accept any liability in respect of
any virus that is not detected.
3aIT Limited

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to