VRF support in openldap

Sorry for the confusion. I meant virtual routing and forwarding(VRF), where in we will have to bind the socket to a particular vrf-id when connecting to ldap-server.

Thanks, Smitha

Howard Chu

4:21 p.m.

tishamol@gmail.com wrote:

...

Hi Howard,

Sorry for the confusion. I meant virtual routing and forwarding(VRF), where in we will have to bind the socket to a particular vrf-id when connecting to ldap-server.

In Linux you must explicitly bind a socket to a VRF, as doc'd here

https://docs.kernel.org/networking/vrf.html

After you've bound your socket, you can give it to libldap with ldap_init_fd() and then use it normally thereafter.

...

Thanks, Smitha

-- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

tishamol＠gmail.com

12 Jan 12 Jan

2:31 p.m.

Hi Howard,

Old code was like this 1: ldap_initialize() 2: ldap_start_tls_s()

To use ldap_init_fd() code is modified as below 1: socket() 2: connect() 3: setsockopt(sockfd, SOL_SOCKET, SO_BINDTODEVICE,(int *) vrfid, strlen(vrfid) + 1); 4: ldap_init_fd() 5: But ldap_start_tls_s() failes with error " Can't contact LDAP server"

Am i missing something in this flow?

Thanks, Smitha

tishamol＠gmail.com

27 Jan 27 Jan

11:35 a.m.

It worked with the above changes. For ldaps i had to call ldap_install_tls (ld) as well .

Thanks, Smitha

697

Age (days ago)

714

Last active (days ago)

openldap-technical@openldap.org

5 comments

2 participants

tags (0)

participants (2)

Howard Chu
tishamol＠gmail.com