Re: [PATCH] Add an ldapoption to disable chasing LDAP referrals - Mailing list pgsql-hackers
Hey Peter,
You are correct, it is the same as the referrals option in pam_ldap. It's also the -C (sometimes -R - it seems ldapsearch options are pretty non-standard) option in ldapsearch.
As far as I'm aware you can't pass this in an LDAP URL, primarily because this never gets sent to the LDAP server. The server always returns an LDIF with inline references, this just determines if you chase them client side or just list them as is.
I could be missing something here, but using:
ldapreferrals={0|1}
Would require a three state type, as we need a way of not interfering with the library defaults? To 'enable' the new behavior here using a boolean you would need to set ldapreferrals=false - which with the normal way of dealing with config booleans would alter the default behavior if the option was not specified.
How do you feel about:
ldapdisablereferrals=(0|1)
Cheers,
James Sewell
James Sewell
PostgreSQL Team Lead / Solutions Architect
_____________________________________
On Tue, Jul 2, 2013 at 10:46 PM, Peter Eisentraut <peter_e@gmx.net> wrote:
On 7/2/13 12:20 AM, James Sewell wrote:This appears to be the same as the "referrals" option in pam_ldap
> Hey All,
>
> This patch request grew from this post (of mine) to pgsql-general:
>
> http://www.postgresql.org/message-id/CABUevEzouAe-g1_OejaGujjMem675DNYStwyBp4d_Wz6Om+fxA@mail.gmail.com
>
> The patch adds another available LDAP option (ldapnochaseref) for
> search+bind mode in the pg_hba.conf fil. If set to 1 (0 is default) then
> it performs a ldap_set_option which disables chasing of any LDAP
> references which are returned as part of the search LDIF.
(http://linux.die.net/man/5/pam_ldap). So it seems legitimate.
For consistency, I would name the option ldapreferrals={0|1}. I prefer
avoiding double negatives.
Do you know of a standard way to represent this option in an LDAP URL,
perhaps as an extension?
The contents of this email are confidential and may be subject to legal or professional privilege and copyright. No representation is made that this email is free of viruses or other defects. If you have received this communication in error, you may not copy or distribute any part of it or otherwise disclose its contents to anyone. Please advise the sender of your incorrect receipt of this correspondence.
Attachment
pgsql-hackers by date: