h.b.furuseth@usit.uio.no wrote:

ando@sys-net.it writes:

...

Proxy backends use ldap_set_option(3) to set alias dereferencing when requested by a search operation (and do not clean it up afterwards, as far as I can tell). Since LDAP handlers are pooled and reused, this behavior is inherently broken.

I note you committed this with an ldap_int_* interface.

Yes, that's because I needed it internally.

But it could be useful outside OpenLDAP code too.

Yes, that will probably be the next step. But to make it publicly available I should have called it ldap_search_ext2, or ldap_search_really_ext or something like that. I think we need to make it public based on demand and after a ballot on the name.

Seems to me this is what client-side controls are for. Extending the client-side functionality without needing a new API.

Well, since alias dereferencing is part of the protocol, I think using a client-side control is sort of an overkill :)

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando@sys-net.it -----------------------------------