To do: LDAPv3 response controls / ldap.LDAPError exceptions

[Michael S. <mi...@st...>]

HI!

In some situations there are controls attached to a LDAP response also
in the case if LDAPResult::resultCode is not success(0). python-ldap
just generates an exception in this case with resultCode,
diagnosticMessage etc. But a calling application might also need to have
access to the controls which might indicate more details why the
operation failed.

One important example for this behaviour are password policy controls
and the bind operation (see [1] and [2]). The response controls define
why the operation failed (e.g. password soon to expire, password reset
needed).

Could somebody with C programming skills please look into how to return
these controls to the calling application via exception?

Also we should look at how response controls can be returned to the
application in case of intermediate responses. E.g. this is needed for
implementing syncrepl in searchAndPersist mode with search requests.

Ciao, Michael.

[1] http://tools.ietf.org/draft/draft-behera-ldap-password-policy/
[2] http://tools.ietf.org/draft/draft-vchu-ldap-pwd-policy/