[Date Prev][Date Next]
Re: DNS discovery for OpenLDAP?
Russ Allbery wrote:
Jaap Winius<email@example.com> writes:
In the course of my research into a solution involving Kerberos,
OpenLDAP and OpenAFS (a.k.a. the Magic Trio), I've discovered that both
Kerberos and OpenAFS support methods of DNS discovery, but that OpenLDAP
apparently does not. Is this correct?
OpenLDAP's command-line tools support service discovery using DNS SRV
records. See, for instance, the ldapsearch man page:
Specify URI(s) referring to the ldap server(s); a list of
URI, separated by whitespace or commas is expected; only the
protocol/host/port fields are allowed. As an exception, if
no host/port is specified, but a DN is, the DN is used to
look up the corresponding host(s) using the DNS SRV records,
according to RFC 2782.
I'm not sure if this is also available directly in the library or if the
client has to implement it.
This feature is implemented in the OpenLDAP client code, not in libldap.
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/