[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: OpenLDAP and DNS SRV records

I apologize, but I did find a reference on how to do this in the man page for ldapsearch:

.BI \-H \ ldapuri
Specify URI(s) referring to the ldap server(s);
a list of URI, separated by whitespace or commas is expected;
only the protocol/host/port fields are allowed.
As an exception, if no host/port is specified, but a DN is,
the DN is used to look up the corresponding host(s) using the
DNS SRV records, according to RFC 2782.  The DN must be a non-empty
sequence of AVAs whose attribute type is "dc" (domain component),
and must be escaped according to RFC 2396.

My question then, is this also possible when not using the ldapsearch tool, but using the ldap library calls/API or is this change in 2.4 exclusive to the command line tools?

On Wed, Dec 17, 2008 at 1:06 PM, Matt Kowske <jmkowske@gmail.com> wrote:
Thanks. Where can I find some documentation on configuring that in 2.4?

On Wed, Dec 17, 2008 at 8:31 AM, Gavin Henry <ghenry@suretecsystems.com> wrote:

----- "Matt Kowske" <jmkowske@gmail.com> wrote:

> Hello,
> I have been searching google trying to find an answer to this, but
> have only things dated 2001 and prior. Question: Does openldap
> (client) support the use of SRV records to determine the availability
> of an ldap server? In this particular case, the openldap libraries are
> compiled into another unix executable and 1 of 8 AD servers is
> contacted via round robin DNS aliasing. Is it possible for openldap to
> reference the SRV record in DNS rather than the A record?

2.4 does, 2.3 doesn't.

Kind Regards,

Gavin Henry.

T +44 (0) 1224 279484
M +44 (0) 7930 323266
F +44 (0) 1224 824887
E ghenry@suretecsystems.com

Open Source. Open Solutions(tm).


Suretec Systems is a limited company registered in Scotland. Registered
number: SC258005. Registered office: 13 Whiteley Well Place, Inverurie,
Aberdeenshire, AB51 4FP.

Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html