[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: LDAP proxy with features

On Mon, 2005-12-05 at 13:46 -0600, Pratt, Benjamin E. wrote:

> The part that is confusing me about LDAPS is that in previous versions I
> never touched the ldap.conf file. I just had to configure the slapd.conf
> file. The ldap.conf file was never touched.

I need to amend my previous posting.  In current OpenLDAP 2.3 the proxy
is entirely configured via slapd.conf.  However I've rechecked the whole
stuff and it seems to work as expected.

> The proxy is making a call out to the backend server but something's
> getting hung. Yes, the backend server is running LDAPS I just can't
> figure out where the process is hanging.

Note that in OL 2.3 you can have a complete variety of TLS policies,
i.e. the proxy can: use an "ldaps://" URI; enforce the use of StartTLS
on a plain "ldap://"; URI, or propagate StartTLS if used by the original
client: see the "tls" directive in slapd-ldap(5).  I've tested all of
them with current HEAD code, and it seems to work as expected, even with
rewrite/remap in the middle.

I suggest you produce more details about your configuration; you should
clarify if attribute mapping has anything to do with it and then try to
simplify thing down to a level where each issue can be addressed

As soon as we get to something consistent and reproducible that clearly
indicates a potential bug, I'll urge you to file an ITS.


Ing. Pierangelo Masarati
Responsabile Open Solution

SysNet s.n.c.
Via Dossi, 8 - 27100 Pavia - ITALIA
Office:   +39.02.23998309          
Mobile:   +39.333.4963172
Email:    pierangelo.masarati@sys-net.it