Ok, so, with the small ldap server I have setup on my laptop, this code works fine. When I point it to the "real" LDAP server, it stops working.
This:
attr_values = ldap_get_values_len(ldap_conn, entry, mod_auth_conf.ldap.active_attr);
fails with: Decoding error
the attribute I hand it exists in the record it's searching for.
How do I determine why this is failing?
Thanks!
-brian
On Thu, Mar 13, 2008 at 03:38:25PM -0500, Brian Hechinger wrote:
This:
attr_values = ldap_get_values_len(ldap_conn, entry, mod_auth_conf.ldap.active_attr);
fails with: Decoding error
the attribute I hand it exists in the record it's searching for.
Bah, the bind credentials I was given can't see that attribute even though I was told it could. That'll teach me to trust people. ;)
However, is there a way to determine why this failed? "Decoding error" isn't nearly as useful as "This attribute doesn't exist".
-brian
Brian Hechinger wrote:
On Thu, Mar 13, 2008 at 03:38:25PM -0500, Brian Hechinger wrote:
This:
attr_values = ldap_get_values_len(ldap_conn, entry, mod_auth_conf.ldap.active_attr);
fails with: Decoding error
the attribute I hand it exists in the record it's searching for.
Bah, the bind credentials I was given can't see that attribute even though I was told it could. That'll teach me to trust people. ;)
However, is there a way to determine why this failed? "Decoding error" isn't nearly as useful as "This attribute doesn't exist".
OpenLDAP software is usually fair. When it gets "This attribute doesn't exist" it prints "This attribute doesn't exist". If it prints "Decoding error" then it was unable to decode the server's response.
Unfortunately you seem to pretend that the client uses a crystal ball instead of pretending that the server returns well-formed packets. And you seem to pretend that we also use a crystal ball by not providing any useful info about the players in your game.
What server, what version, what request is being sent? Can you provide a dump of the response, in order to try to understand why OpenLDAP can't decode it? I infer from a previous message of yours that you're using the client library from OpenLDAP 2.4.8, can you confirm this?
p.
Ing. Pierangelo Masarati OpenLDAP Core Team
SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati@sys-net.it ---------------------------------------
openldap-software@openldap.org