Andrew Bartlett wrote:
I've been wondering why I couldn't get the wonders of refint
and
memberOf to play together, and even went to the extent of writing a
testsuite to prove that they could work (indeed, they do).
However, I eventually found my problem - while memberOf works very
nicely as a global overlay, the refint module does not (yet :-).
With it loaded per-backend (for now), it seems to work. Any chance
someone could knock me up a patch for that, much like was done so well
for memberOf?
Well, it doesn't seem to be impossible, but it'd require some redesign.
Basically, it should work if the suffix of the database is the empty
DN (""), or if, in case of multiple databases, there is an empty DN
database that glues the whole thing together.
The expected behavior should probably consist in:
- letting slapo-refint understand it's instantiated as global
- make it linearly operate on all the existing databases instead of on
just the one it's instantiated for in refint_response().
The fix looks relatively simple, although I don't know whether there are
any side effects, as I'm not too much familiar with slapo-refint's
internals.
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
---------------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Email: pierangelo.masarati(a)sys-net.it
---------------------------------------