python-ldap-dev

python-ldap and updateref

[Jens V. <je...@zo...>]

for one of my python-ldap-based applications i am trying to make it 
behave correctly in a situation where it is talking to a slave that 
wants to defer to a master for certain updates.

i have done some testing by setting up a master and slave and using the 
"updateref" directive in the slave's slapd.conf. according to the 
OpenLDAP documentation that should cause the slave to hand back the URI 
designated in the updateref directive if someone attempts a write. 
however, it doesn't seem to work, at least from python-ldap. i can 
modify records on the slave all day long and it does not hand back the 
master's URI. at the python prompt, after binding with a suitable DN i 
also do...

conn.set_option(ldap.OPT_DEREF, ldap.DEREF_ALWAYS)

but this does not seem to make a change.

does anyone have this working with python-ldap? is my slave server 
configured incorrectly?

jens

Re: python-ldap and updateref

[<mi...@st...>]

Jens Vagelpohl wrote:
> 
> i have done some testing by setting up a master and slave and using the 
> "updateref" directive in the slave's slapd.conf. according to the 
> OpenLDAP documentation that should cause the slave to hand back the URI 
> designated in the updateref directive if someone attempts a write.
> [..]
> conn.set_option(ldap.OPT_DEREF, ldap.DEREF_ALWAYS)

This option is for setting alias dereferencing which is something different.

> but this does not seem to make a change.

Maybe the OpenLDAP lib handles the referral internally and already changes 
the entry on your master?

If you don't want to let the OpenLDAP lib handle the referral you have to use:

conn.set_option(ldap.OPT_REFERRALS,0)

Ciao, Michael.

Re: python-ldap and updateref

[Jens V. <je...@zo...>]

michael,

i know for a fact that the referral is not handled internally, the=20
entry on the master never gets changed. at this point i am not entirely=20=

sure if my slave is indeed configured correctly.

i did read in some unrelated documentation that how the referral is=20
handled differs based on the type of authentication you use. at this=20
moment i am using a simple bind.

jens

P.S.: frohe weihnachten ;)



On Tuesday, Dec 24, 2002, at 10:11 US/Eastern, Michael Str=F6der wrote:

> Jens Vagelpohl wrote:
>> i have done some testing by setting up a master and slave and using=20=

>> the "updateref" directive in the slave's slapd.conf. according to the=20=

>> OpenLDAP documentation that should cause the slave to hand back the=20=

>> URI designated in the updateref directive if someone attempts a >> =
write.
>> [..]
>> conn.set_option(ldap.OPT_DEREF, ldap.DEREF_ALWAYS)
>
> This option is for setting alias dereferencing which is something=20
> different.
>
>> but this does not seem to make a change.
>
> Maybe the OpenLDAP lib handles the referral internally and already=20
> changes the entry on your master?
>
> If you don't want to let the OpenLDAP lib handle the referral you have=20=

> to use:
>
> conn.set_option(ldap.OPT_REFERRALS,0)
>
> Ciao, Michael.
>

Re: python-ldap and updateref

[<mi...@st...>]

Jens Vagelpohl wrote:
> 
> i know for a fact that the referral is not handled internally, the entry 
> on the master never gets changed. at this point i am not entirely sure 
> if my slave is indeed configured correctly.

If you use

conn.set_option(ldap.OPT_REFERRALS,0)
conn.manage_dsa_it(0) # this is the default

and your server is configured correctly you should get an exception of class 
ldap.REFERRAL.

> P.S.: frohe weihnachten ;)

Ah, yes. :-)

Merry Christmas to all the list members and a happy New Year.

Ciao, Michael.

Re: python-ldap and updateref

[Jens V. <je...@zo...>]

thanks a bunch, i am now getting the correct ldap.REFERRAL exception :)

jens


On Tuesday, Dec 24, 2002, at 10:34 US/Eastern, Michael Str=F6der wrote:

> Jens Vagelpohl wrote:
>> i know for a fact that the referral is not handled internally, the=20
>> entry on the master never gets changed. at this point i am not=20
>> entirely sure if my slave is indeed configured correctly.
>
> If you use
>
> conn.set_option(ldap.OPT_REFERRALS,0)
> conn.manage_dsa_it(0) # this is the default
>
> and your server is configured correctly you should get an exception of=20=

> class ldap.REFERRAL.
>
>> P.S.: frohe weihnachten ;)
>
> Ah, yes. :-)
>
> Merry Christmas to all the list members and a happy New Year.
>
> Ciao, Michael.
>