[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Add supportedExtensions to LDAP proxy




On 9/01/2019 15:28, Howard Chu wrote:
It's not that simple. Advertising a supportedExtension in the rootDSE implies that the
entire server supports them. slapd allows multiple backends to operate at once, and what
you're talking about would only be valid for a single specific back-ldap instance.

The standard format for extended ops doesn't include a DN, and slapd uses the DN to
determine which backend should process an incoming op. So there's no generic way
for slapd to correctly forward an incoming exop to the correct backend, or the proxy backend.
Every op must be handled explicitly and must be at least parsed in order for slapd to
be able to route it.

Okay, that makes sense. Thank you for the explanation

Philip