Sambruk / EgilSCIM

The EGIL SCIM client
GNU Affero General Public License v3.0
4 stars 7 forks source link

Implement LDAP referrals chasing properly #144

Open joesiltberg opened 2 years ago

joesiltberg commented 2 years ago

Currently, if an LDAP directory refers the client to a different directory, we will do a default (anonymous) bind which typically fails.

See:

https://www.openldap.org/software//man.cgi?query=ldap_get_option&sektion=3&apropos=0&manpath=OpenLDAP+2.4-Release

In the end, Notes, there's some stuff about referrals.

We should probably use ldap_set_rebind_proc:

https://linux.die.net/man/3/ldap_set_rebind_proc

perhaps it's a good idea to find some example code.

Note also that we now have an option for disabling referrals, so this only needs to be done when we haven't disabled referrals.