Hello ! I send you this mail because I have some difficulties to understand this property "ranger.ldap.referral" in the ranger-site.xml.
The documentation I found on HW website says the following piece of information : ### There are three possible values for ranger.ldap.referral: follow, throw, and ignore. The recommended setting is follow. When searching a directory, the server might return several search results, along with a few continuation references that show where to obtain further results. These results and references might be interleaved at the protocol level. - When this property is set to follow, the LDAP service provider processes all of the normal entries first, and then follows the continuation references. - When this property is set to throw, all of the normal entries are returned in the enumeration first, before the ReferralException is thrown. By contrast, a "referral" error response is processed immediately when this property is set to follow or throw. - When this property is set to ignore, it indicates that the server should return referral entries as ordinary entries (or plain text). This might return partial results for the search. ### I'm not really sure to understand, even with this description, what the property does exactly. Q1 - What is a continuation references ? Q2 - Concerning the throw value, I don't understand the description. Because : - On one hand, it says "When this property is set to throw, all of the normal entries are returned in the enumeration first, before the ReferralException is thrown" - On the other hand, it says "By contrast, a "referral" error response is processed immediately when this property is set to follow or throw." So when I put the value "throw" for this property, when does it raise an error ? Q3 - What is a referral entry ? Q4 - When is this property used by ranger ? Best regards. Lune.
