Re: NEW: chasing referrals

[Graham B. <gb...@po...>]

On Fri, Apr 20, 2001 at 02:27:19PM +0200, Roland Stigge wrote:
> Hi,
> 
> Graham Barr wrote:
> > It would seem the server thinks you are a version 2 client. Error code 9 is
> > 
> > LDAP_PARTIAL_RESULTS
> > 
> > Returned to version 2 clients when a referral is returned. The response
> > will contain a list of URL's for other servers.
> > 
> > It is then returning the referrals in the error message.
> 
> Does this mean that I'll have to use this for manually chasing referrals
> or is there a way to make the server talk to me LDAPv3?
> 
> > Can you turn on debug by adding   debug => 15   into the arguments
> > of the constructor
> 
> It's 7k, so I will only forward it to you personally.
> 
> The others can request it, if needed. ;)

OK, I see the problem.

You don't check the result of the bind.

A few versions back a test was introduced to avoid acidental anonymous
binds. This test was that if any arbuments were passed to bind, then you
must specify how you want to bind. So

$ldap->(version => 3);

will just fail with  LDAP_INAPPROPRIATE_AUTH, "No AUTH supplied"

This probably needs to be fixed.

However, this does mean that no bind request is sent.

With version 2 a bind was required, but with version 3 it is not. The
server should assume a version3 anonymous bind if it has not received
a bind request.

Anyway, changing your bind to

  $ldap->bind(version => 3, anonymous => 1);

should do the trick.

Graham.