[Date Prev][Date Next]
back-ldap problem with Win2000 Active Directory
we are currently using slapd with back-ldap to connect to an Active
Directory LDAP server:
client <--> sldap
back-ldap <--> Active Directory
When doing some simple searches (ldapsearch -s one "uid=toto"),
back-ldap crashes with the following message:
slapd: result.c:518: send_search_result: Assertion `!(((0x51) <= (( err
))) && ((( err )) <= (0x61)))' failed.
There is no problem without the "-s one" option.
After some debug, it appears that AD sends some non-standard messages;
in response to the search request, back-ldap gets the following message
(captured with Ethereal):
Result code: 0x09
Matched DN: (null)
Error message: Referral:
The result code of 9 is not valid (it is written to be reserved in
RFC2251) but OpenLDAP seems to understand that it is a referal. The
problem is that the URL of the referal is not well parsed; in response
to this search result, back-ldap sends another search request to the AD:
Base DN: CN=Configuration,DC=thehost,DC=com??base
There shouldn't be "??base" in the base DN and the scope should be
"base". Then AD replies with another result code 9 search result but
with a referal to "thehost.com??base" which leads to the slapd crash.
Does anybody knows how to fix this problem?
Bertrand Croq - VIRTUAL NET (http://www.virtual-net.fr)
80, avenue des Buttes de Coesmes - 35700 RENNES
tel: +33 2 23 21 06 30 - fax: +33 2 99 38 16 85