[Fedora-directory-users] Referrals break everything ...

[Pete Rowley]

Philip Kime wrote:
> I am running the latest Fedora-DS and trying to use nss_ldap. I have 
> to migrate an older LDAP server onto the Fedora-DS but keep 
> temporarily the old tree structure for all current LDAP clients.
This is a classic use case for Virtual DIT Views, the advantage over 
referrals being that it works with clients that don't follow referrals. 
As long as the entries contain the information required to do so, any 
DIT structure can be created virtually - so you're old DIT can exist at 
the same as your new one.

http://www.redhat.com/docs/manuals/dir-server/deploy/7.1/dit.html#1005889


> So I was goint to leave the old search base in /etc/ldap.conf on the 
> client and just re-direct queries to the new location (on the same 
> server). A job for referrals, I thought. I'll just put a stub root dc 
> on the new server and make it point to the new location, like this:
>  
> dc=a,dc=y
>  
> a referral to the new
>  
> dc=a,dc=b
>  
> I set this up, ldapsearch shows that it's getting the right referral 
> (though I can't seem to get ldapsearch follow the the referral?)
>  
> However, if I try to do anything involving nss_ldap (which otherwise 
> works fine), I get this, for example, in syslog:
>  
> getent: nss_ldap: could not search LDAP server - Referral
>  
> Does nss_ldap not follow referalls? That would make it rather useless 
> .... Is this a Fedora-DS problem?
>  
> --
> Philip Kime
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   


-- 
Pete

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3241 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20060629/b07b94db/attachment.bin>