On Mon, Jun 11, 2012 at 09:52:59AM -0700, Quanah Gibson-Mount wrote:
> --On Monday, June 11, 2012 12:34 PM +0000 Viktor Dukhovni
> <[email protected]> wrote:
>
> >So this SRV syntax is not available to applications that use
> >OpenLDAP, for example Postfix.
> >
> >I would like to see proper SRV-based LDAP URIs in the OpenLDAP
> >library, based on correctly formed escaping rules. Sadly the support
> >for these is a half-baked hack in the command-line utilities.
>
> SRV handling is in:
>
> libldap/dnssrv.c
LDAP URI handling via SRV records is not in the library. In
particular, an OpenLDAP library client that specifies a
(correctly formed or otherwise) LDAP URI of the form:
ldap:///dc=example,dc=com/
will not be connected to the LDAP servers found in the SRV records
for _ldap._tcp.example.com. That code is only in the ldapsearch(1)
and related tools.
> I would note the symbols from the functions also exist in a compiled
> libldap and libldap_r:
>
> quanah@zre-ldap001:/opt/zimbra/openldap/lib$ grep -i ldap_dn2domain *
> Binary file libldap-2.4.so.2.8.3 matches
> Binary file libldap.a matches
> Binary file libldap_r-2.4.so.2.8.3 matches
> Binary file libldap_r.a matches
>
>
> Last I checked, libldap was definitely a library. If you feel there
> is something not working correctly, you are certainly free to file
> an ITS at http://www.openldap.org/its/
The existence of the low-level support functions in the library is
of no help to users who want to specify URIs that resolve to the
underlying LDAP servers via SRV records.
--
Viktor.