[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: UPN in BIND request

To: openldap-technical@openldap.org
Subject: Re: UPN in BIND request
From: Buchan Milne <bgmilne@staff.telkomsa.net>
Date: Wed, 25 Nov 2009 08:32:24 +0100
Cc: Siddharth Sehjpal <sidharth.sehjpal@gmail.com>
Content-disposition: inline
In-reply-to: <19e705090911241237t58784832x4138395de6ce2f9b@mail.gmail.com>
References: <19e705090911240117o62256065w47f38db7d9987c6b@mail.gmail.com> <19e705090911241215l7f0ade2anbcc7e0aff8bd3138@mail.gmail.com> <19e705090911241237t58784832x4138395de6ce2f9b@mail.gmail.com>
User-agent: KMail/1.11.4 (Linux/2.6.29.6-desktop-2mnb; KDE/4.2.4; x86_64; ; )

On Tuesday, 24 November 2009 21:37:38 Siddharth Sehjpal wrote:
>  Hi Jonathan,
>
> I am working in a test environment where I have dummy accounts in AD and
> OpenLDAP, I happen to see that AD schema has userPrincipalname attribute
> and this is missing in OpenLDAP, The application I am trying with is
> strictly using UPN names

In other words, it is an AD-only application, not an LDAP-compliant 
application. I would recommend you make the vendor/developers aware of this 
and ask them to support the IETF-standardised protocol and not a specific 
broken implementation, or not use the software.

If you want/need something that supports the brokenness/non-compliance of AD, 
your best bet is probably Samba4.

Regards,
Buchan

References:
- UPN in BIND request
  - From: Siddharth Sehjpal <sidharth.sehjpal@gmail.com>
- Re: UPN in BIND request
  - From: Siddharth Sehjpal <sidharth.sehjpal@gmail.com>

Prev by Date: Re: /etc/nsswitch cause delay in start
Next by Date: Re: /etc/nsswitch cause delay in start
Index(es):
- Chronological
- Thread