Hi everyone,
I have a question regarding the best way to enable rewriting of the searchDN based on the searchFilter.
I have searched through the archives, and I see that my question was expressed in this 2004 email: http://www.openldap.org/lists/openldap-software/200401/msg00612.html. I couldn't seem to find any other relevent posts.
As this response is a number of years old, do those recommendations still stand? Is this operation slapd.conf configurable? Is the best way forward to develop a separate overlay to perform this operation? Any information greatly appreciated.
Thanks,
Andrew
Andrew Bidwell wrote:
Hi everyone,
I have a question regarding the best way to enable rewriting of the searchDN based on the searchFilter.
I have searched through the archives, and I see that my question was expressed in this 2004 email: http://www.openldap.org/lists/openldap-software/200401/msg00612.html. I couldn't seem to find any other relevent posts.
As this response is a number of years old, do those recommendations still stand? Is this operation slapd.conf configurable? Is the best way forward to develop a separate overlay to perform this operation? Any information greatly appreciated.
Have you tried anything with 2.4.5 beta?
Thanks,
Andrew
Hi Gavin,
thanks for your reply. I've had a look at and installed 2.4.5 beta, but I can't seem to find anything relevent. Was there a particular element you were thinking of for my situation?
Does 2.4.5 beta provide a way to define the order of the rewrite contexts through the conf file?
- Andrew
________________________________
From: Gavin Henry [mailto:ghenry@OpenLDAP.org] Sent: Sun 30-Sep-07 22:50 To: Andrew Bidwell Cc: openldap-software@openldap.org Subject: Re: Rewrite searchDN based on searchFilter
Andrew Bidwell wrote:
Hi everyone,
I have a question regarding the best way to enable rewriting of the searchDN based on the searchFilter.
I have searched through the archives, and I see that my question was expressed in this 2004 email: http://www.openldap.org/lists/openldap-software/200401/msg00612.html. I couldn't seem to find any other relevent posts.
As this response is a number of years old, do those recommendations still stand? Is this operation slapd.conf configurable? Is the best way forward to develop a separate overlay to perform this operation? Any information greatly appreciated.
Have you tried anything with 2.4.5 beta?
Thanks,
Andrew
-- Kind Regards,
Gavin Henry. OpenLDAP Engineering Team.
E ghenry@OpenLDAP.org
Community developed LDAP software.
Hi Gavin,
thanks for your reply. I've had a look at and installed 2.4.5 beta, but I can't seem to find anything relevent. Was there a particular element you were thinking of for my situation?
Does 2.4.5 beta provide a way to define the order of the rewrite contexts through the conf file?
OpenLDAP 2.4 sets the variable "searchFilter" before doing any rewriting within the search operation. However I see an issue there: the session is defined as connection-wise, but there might be concurrent search operations within a connection, so it seems that to exploit this feature we need a more granular definition of "session". This is harmless if your clients perform one session at a time.
p.
Ing. Pierangelo Masarati OpenLDAP Core Team
SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati@sys-net.it ---------------------------------------
openldap-software@openldap.org