Re: ldap->ping?

[Graham B. <gb...@po...>]

On Mon, Jul 31, 2000 at 10:26:22AM +0100, Chris Ridd wrote:
> > Hm, I see your point. But could we make a more generic Net::LDAP::DSE ? Is
> > it worth it ?
> 
> Supporting other DSEs is tricky in LDAP because they're not really 
> described properly in the LDAP RFCs, and the mechanism for getting them 
> (via the manageDsaIT service control) is not a standard part of LDAP.
> 
> The only commonality between DSEs is an attribute called dseType. The value 
> is a named bitstring, eg "( entry $ admPoint )", or "( root )".
> 
> If you want a more generic Net::LDAP::DSE, then it would need to hold the 
> dseType, and construct the more specific RootDSE object if it found the 
> dseType contained 'root'.

Hm, I think just ::RootDSE would be fine.

> >> I don't think there's a way to find if the first mode's supported. You
> >> can't go by vendor names and product versions, because administrators
> >> might  feasibly disable LDAPS support.
> >
> > Sure there is. Just try to connect to the LDAPS port :)
> 
> Which one? The default one?

Yes, as you said there is no way to determine if they are supporting it,
so you can only try the default port.

Graham.