[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Using UPN notation for LDAPbind

To: Wilhelm Meier <wilhelm.meier@fh-kl.de>
Subject: Re: Using UPN notation for LDAPbind
From: Michael StrÃder <michael@stroeder.com>
Date: Fri, 26 Dec 2008 00:23:49 +0100
Cc: openldap-software@openldap.org
In-reply-to: <200812251957.52949.wilhelm.meier@fh-kl.de>
References: <200812251957.52949.wilhelm.meier@fh-kl.de>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.19) Gecko/20081204 SeaMonkey/1.1.14

Wilhelm Meier wrote:
> is there a way to use the UPN (user@domain.com) notation to do a bind 
> to the OpenLDAP-Server.

Assuming you mean simple bind the answer is no. According to RFC 4511
the name in a BindRequest is a DN. Using the UPN as name is a
proprietary violation of LDAPv3 in MS AD.

> Or do I have to use the rwm-overlay to map 
> the bind-string to a valid DN?

Not sure whether that would work.

Ciao, Michael.

Follow-Ups:
- Re: Using UPN notation for LDAPbind
  - From: Pierangelo Masarati <ando@sys-net.it>

References:
- Using UPN notation for LDAPbind
  - From: Wilhelm Meier <wilhelm.meier@fh-kl.de>

Prev by Date: Using UPN notation for LDAPbind
Next by Date: Re: Using UPN notation for LDAPbind
Index(es):
- Chronological
- Thread