[Date Prev][Date Next]
experimental default referral service for DC style DNs
The OpenLDAP Project is operating an experimental global root
LDAP server suitable for use as a default referral service.
The server will respond with a referral for LDAP operations where
the DN of the operation:
1) uses Internet (DC) style naming
2) ldap SRV resource records are available via the
Domain Name Service (DNS).
The service will respond with noSuchObject for DNs not meeting
these requirements [including all X.500 (organizational) style
There is no registration required to use this service.
This service is provided for free, it is experimental, it may
be discontinued at any time, and is provided "as is" (see disclaimer
The service support both LDAPv2+ and LDAPv3 clients. The
service runs experimental, stripped down version OpenLDAP
2.0-devel software. (This should not be taken that OpenLDAP
2.0-devel itself is ready for general use, it's not).
The OpenLDAP Project
To allow your Internet (DC) style DNs to be located, you must
add a DNS RR to your zone. For "dc=example,dc=net" hosted
at ldap://ldap.example.net:389, you would add the RR:
_ldap._tcp.example.net IN SRV 0 0 389 ldap.example.net.
After loading the above, you should then be able to do:
% ldapsearch -R -b "dc=example,dc=net" -h root.openldap.org "(objectclass=*)"
ldap_search: Partial results and referral received
additional info: Referral:
To configure with OpenLDAP slapd to redirect clients to
this global root server, add the following to your
Gulbrandsen, A., Vixie, P. and L. Esibov, "A DNS RR for
specifying the location of services (DNS SRV)", RFC 2782,
Morgan, R.L., and others, "Discovering LDAP Services with
DNS", draft-ietf-ldapext-locate-xx.txt (work in progress).
THIS FREE SERVICE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR
IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.