On Mon, Jun 11, 2012 at 09:52:59AM -0700, Quanah Gibson-Mount wrote:

> --On Monday, June 11, 2012 12:34 PM +0000 Viktor Dukhovni
> <[email protected]> wrote:
> 
> >So this SRV syntax is not available to applications that use
> >OpenLDAP, for example Postfix.
> >
> >I would like to see proper SRV-based LDAP URIs in the OpenLDAP
> >library, based on correctly formed escaping rules. Sadly the support
> >for these is a half-baked hack in the command-line utilities.
> 
> SRV handling is in:
> 
> libldap/dnssrv.c

LDAP URI handling via SRV records is not in the library. In
particular, an OpenLDAP library client that specifies a
(correctly formed or otherwise) LDAP URI of the form:

        ldap:///dc=example,dc=com/

will not be connected to the LDAP servers found in the SRV records
for _ldap._tcp.example.com. That code is only in the ldapsearch(1)
and related tools.

> I would note the symbols from the functions also exist in a compiled
> libldap and libldap_r:
> 
> quanah@zre-ldap001:/opt/zimbra/openldap/lib$ grep -i ldap_dn2domain *
> Binary file libldap-2.4.so.2.8.3 matches
> Binary file libldap.a matches
> Binary file libldap_r-2.4.so.2.8.3 matches
> Binary file libldap_r.a matches
> 
> 
> Last I checked, libldap was definitely a library.  If you feel there
> is something not working correctly, you are certainly free to file
> an ITS at http://www.openldap.org/its/

The existence of the low-level support functions in the library is
of no help to users who want to specify URIs that resolve to the
underlying LDAP servers via SRV records.

-- 
        Viktor.

Reply via email to