Edit report at https://bugs.php.net/bug.php?id=51638&edit=1
ID: 51638 User updated by: marco at forgetaboutit dot net Reported by: marco at forgetaboutit dot net Summary: LDAP and Referrals -Status: Feedback +Status: Open Type: Bug Package: LDAP related Operating System: ALL PHP Version: Irrelevant Block user comment: N Private report: N New Comment: Not sure what you mean by "LDAP library". Do you mean the PHP library, which would be the standard one, or the LDAP backend, which would be OpenLDAP. We (the collective "we", not the Royal "we") have got it to work, and it is not at all obvious, and what documentation there is is very misleading. We have documented most/all of it in the comments in the manual on ldap_set_rebind_proc (http://php.net/manual/en/function.ldap-set-rebind-proc.php). That should be a good place for someone to start some proper documentation. Also, I haven't looked at the PHP testing code recently, but I am pretty sure the referral test is bogus, and would always "pass" the test regardless of whether it actually worked or not. I think this may also be true of the underlying code used to code the PHP library Previous Comments: ------------------------------------------------------------------------ [2013-09-30 11:13:54] m...@php.net What LDAP library do you use? Does it support referrals? ------------------------------------------------------------------------ [2011-02-26 20:19:04] marco at forgetaboutit dot net I have now spent quite a lot of time working on this issue, and looking at tcpdumps it is very clear that there are major issues in the way php handles add, modify and delete referrals. I believe this is due to the fact that the tests used to validate the code are also wrong, so the code is believed to be good, when it isn't. I will be submitting an alternative way of doing referrals by switching off the php method and doing it with three new functions which I will post on the ldap_set_rebind_proc documentation page once I know it is at least working. I do not have enough skills to work on php source code but would be more than happy to assist a programmer with little or no ldap knowledge if that would help. ------------------------------------------------------------------------ [2010-10-23 15:26:14] ka...@php.net After reviewing this bug some more, it looks more to me like its an actual issue in the ldap extension in PHP, so moving it to that category where hopefully one of the maintainers can pick it up and decide if its indeed an issue in the ldap extension or lacking documentation. ------------------------------------------------------------------------ [2010-07-20 15:40:35] art dot vanscheppingen at spilgames dot com We have the exact same problem. Referrals do work correctly using the cli ldapmodify and with the exact same setup it doesn't work under PHP. I tried setting the LDAP_OPT_REFERRALS to either 1, LDAP_OPT_ON and true, but neither of them resulted in anything else than the default -1. Setting the value to 0 does have effect though, but doesn't do anything either. I set the LDAP server to a read only server, but that resulted in a LDAP error. ------------------------------------------------------------------------ [2010-05-21 17:54:05] marco at forgetaboutit dot net Doing some monitoring with TCPDUMP, I can confirm that the local LDAP server is returning the correct referral information, and then the web server is performing a DNS lookup on the ldap referral URL. Then it would seem that PHP just tries the localhost again without running the procedure specified in ldap_set_rebind_proc. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=51638 -- Edit this bug report at https://bugs.php.net/bug.php?id=51638&edit=1
