[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SuffixMassage and RewriteContext bindDN / Password Rewriting (2.2.23)

To: Tom Mitchell <tom_mitchell@mail.com>
Subject: Re: SuffixMassage and RewriteContext bindDN / Password Rewriting (2.2.23)
From: Aaron Richton <richton@nbcs.rutgers.edu>
Date: Wed, 9 Aug 2006 15:14:01 -0400 (EDT)
Cc: OpenLDAP-software@OpenLDAP.org
In-reply-to: <20060809104707.814A71024D@ws1-3.us4.outblaze.com>
References: <20060809104707.814A71024D@ws1-3.us4.outblaze.com>

2. I want to use the rewrite engine to rewrite the password submitted by the client.

[and you tried]

rewriteContext bindDN

This will rewrite the DN you are attempting to bind as (the "-D" option to OpenLDAP tools such as ldapsearch(1)), not the credentials ("-w" option that you seem to be trying to work with).

database ldap

You are likely to hurt yourself using back-ldap with version 2.2.23. Leaks, deadlocks, incorrect return values--there's been a bit of progress there in the past year and a half. See the ChangeLog at http://www.openldap.org/software/release/changes.html.

References:
- SuffixMassage and RewriteContext bindDN / Password Rewriting (2.2.23)
  - From: "Tom Mitchell" <tom_mitchell@mail.com>

Prev by Date: Re: slapd/slurpd replication log not written to
Next by Date: Re: ldap deadlock?
Index(es):
- Chronological
- Thread