chase referrals not working with ADS dc's (ITS#2504)

[tobias.loecke@bertelsmann.de]

Full_Name: Tobias
Version: 2.1.17
OS: RedHat
URL: 
Submission from: (NULL) (145.228.82.156)


Hello all-

we have an ADS with multiple subdomains which I need to search in one single
ldap search, but unfortunately chasing referrals seem not to work against ADS.

Regarding to this posting, this issue should have been fixed but isn't
http://www.openldap.org/lists/openldap-devel/200010/msg00106.html

The LDAP search
  ldapsearch -C -a always -s sub -h IP -b dc=2,dc=1 -x -D CN=user -w pw
cn=something
will not find anything in dc=3,dc=2,dc=1 (DNS resolution for 3.2.1. is working
properly and only resolves to LDAP servers).

You'll find the full output below. The search result for the referrals is
correct, but given the amount of time for the search the referrals are not
chased. (Sorry, can't sniff at the moment, working on that....)

Any ideas whats wrong? We tried openldap 2.0.11 and now 2.1.17 as well, but had
the very same result...

Thank you,

Tobias



The output looks like this:
ldapsearch -C -a always -h <IP> -b dc=2,dc=1 -x -s sub -P 3 -D
CN=userid,OU=x,OU=y,OU=z,DC=3,DC=2,DC=1 -w xyz mail=tobias*
# extended LDIF
#
# LDAPv3
# base <dc=2,dc=1> with scope sub
# filter: mail=tobias*
# requesting: ALL
#

# search reference
ref: ldap://5.2.1/DC=5,DC=2,DC=1

# search reference
ref: ldap://4.2.1/DC=4,DC=2,DC=1

# search reference
ref: ldap://2.1/CN=Configuration,DC=2,DC=1

# search reference
ref: ldap://3.2.1/DC=3,DC=2,DC=1

# search result
search: 2
result: 0 Success

# numResponses: 5
# numReferences: 4