1:30 p.m.
Hi,
I would like to know is there any support for passing vrf-id to openldap
library ?
Thanks,
Smitha
7 a.m.
tishamol(a)gmail.com wrote:
Hi,
I would like to know is there any support for passing vrf-id to openldap
library ?
VRF in OpenLDAP means ValueReturnFilter, which has been supported for years. Look at the
ldapsearch(1) manpage,
or read the ldapsearch source code.
Thanks,
Smitha
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
7:47 a.m.
Hi Howard,
Sorry for the confusion. I meant virtual routing and forwarding(VRF), where in we will
have to bind the socket to a particular vrf-id when connecting to ldap-server.
Thanks,
Smitha
4:21 p.m.
tishamol(a)gmail.com wrote:
Hi Howard,
Sorry for the confusion. I meant virtual routing and forwarding(VRF), where in we will
have to bind the socket to a particular vrf-id when connecting to ldap-server.
In Linux you must explicitly bind a socket to a VRF, as doc'd here
https://docs.kernel.org/networking/vrf.html
After you've bound your socket, you can give it to libldap with ldap_init_fd() and
then use it normally thereafter.
Thanks,
Smitha
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
2:31 p.m.
Hi Howard,
Old code was like this
1: ldap_initialize()
2: ldap_start_tls_s()
To use ldap_init_fd() code is modified as below
1: socket()
2: connect()
3: setsockopt(sockfd, SOL_SOCKET, SO_BINDTODEVICE,(int *) vrfid, strlen(vrfid) + 1);
4: ldap_init_fd()
5: But ldap_start_tls_s() failes with error " Can't contact LDAP server"
Am i missing something in this flow?
Thanks,
Smitha
11:35 a.m.
It worked with the above changes.
For ldaps i had to call ldap_install_tls (ld) as well .
Thanks,
Smitha
313
days inactive
330
days old
openldap-technical@openldap.org
5 comments
2 participants
participants (2)
-
Howard Chu -
tishamol＠gmail.com