[Date Prev][Date Next]
(ITS#4456) proxies do not consistently propagate request DN
Full_Name: Pierangelo Masarati
Submission from: (NULL) (220.127.116.11)
Submitted by: ando
This is more an interoperability issue than a bug; I've noticed that in some
cases the psoxies (mostly back-ldap) propagate the o_req_ndn (normalized)
instead of the o_req_dn (pretty) string representation of the request DN. This
is absolutely correct, as implementations must recognize that they are the same
DN, but occasionally other implementations don't. For example (this happened to
gets normalized into
but some versions of Sun ONE seem to fail at returning an entry that was created
as the first form because OpenLDAP's back-ldap uses the second one regardless of
which one is used by the client.
In any case, OpenLDAP proxies should not be smarter than strictly necessary. A
patch is coming.