> On May 14, 2025, at 4:18 PM, Bergmann, Clemens > <clemens.bergm...@tu-darmstadt.de> wrote: > > Another client seems to use the manageDSAIT (2.16.840.1.113730.3.4.2) > control. That seems to receive empty results. We can reproduce the results by > adding ‘-E "2.16.840.1.113730.3.4.2"’ to the ldapsearch command. This will > also result in an empty result. Unfortunately filtering the control in the > same way did not work neither for ldapsearch nor for the other client.
Is the client JNDI? Unfortunately, its default behavior is to send the manage DSA control on ops. If this is your situation, it can be overridden by adding this to its runtime when the context is established: env.put( Context.REFERRAL, "throw" ); — Shawn
