Brian Reichert wrote:
Regrettably, the directory server, in this case, is Active Directory. [..] Active Directory returns referrals in accordance with RFC 2251.
Note that referrals are not fully specified in the LDAPv3 RFCs. Especially there's no specification which authentication the client should use when chasing referrals.
AD returns referrals and it is assumed that the client uses the same authentication used when receiving the referral. But there's nothing in LDAPv3 really defining this specific behaviour.
Furthermore even when integrating various clients with MS AD I never had a use-case requiring to chase AD referrals. What's your use-case requiring client-side referral chasing?
Ciao, Michael.
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature