[email protected] wrote:
> [email protected] wrote:
>> [email protected] wrote:
>>> Howard Chu's examination of the core file showed that the remote AD server
>>> returned a member attribute with no values. This is only legal in LDAP when 
>>> a
>>> client sets the attrsonly flag in its search request, and that flag was not 
>>> set
>>> here.
> [..]
> AD is flaky enough already, but it's possible that back-meta may have dropped 
> the attr values during rewriting, etc.

FWIW: I never saw an empty attribute value list returned by AD. I've
added code to web2ldap to handle that case since I had this issue with
various other LDAP servers but not AD.

Ciao, Michael.


Reply via email to