Ede, hello.

On 20 Feb 2023, at 12:49, Ede Wolf wrote:

> Just guessing by the error message, but your DNS Server does have a valid 
> service record for that Base DN? As the error message suggests otherwise, but 
> I may as well be completely off here.

A good thought -- thanks -- but yes, the SRV records are set up correctly, and 
I can make the query if the ',' in the dc= list are escaped (even though RFC 
2396 doesn't require that).

>  Otherwise, but I am sure you know that, with only two "/" you can alway use 
> the hostname, in case the DNS serive record is missing:
>
>  ldapsearch -H ldap://server.example.net -b dc=example,dc=net"  'cn=foo'

Indeed, and that's what I do most of the time.  In fact, this is a case where a 
sequence of host+port LDAP URIs is useful.

Best wishes,

Norman


-- 
Norman Gray  :  https://nxg.me.uk

Reply via email to