diff options
| author | Arthur de Jong <arthur@arthurdejong.org> | 2014-01-05 22:11:20 +0100 |
|---|---|---|
| committer | Arthur de Jong <arthur@arthurdejong.org> | 2014-01-05 22:11:20 +0100 |
| commit | c6c317ec9efb8190bdc1834091c4761b60637e7f (patch) | |
| tree | 5525692071b163d3a464153aa77d39f8936820af /nslcd/ether.c | |
| parent | be94912a9d236bbe3d5b0e17b771727b0054906d (diff) | |
| parent | 309b4bbbc040ce9f37ccf25399eacc5294bfc34f (diff) | |
Implement deref control handling
This uses the LDAP_CONTROL_X_DEREF control as described in
draft-masarati-ldap-deref-00 to request the LDAP server to dereference
group member attribute values to uid attribute values.
This should reduce the number of searches that are required for
expanding group members that use the member attribute.
This mechanism could also be used to extract information on nested
groups but the gains are less clear there.
Not all LDAP servers support this control. In OpenLDAP, load the
(currently undocumented) deref overlay and enable it for the database to
take advantage of this improvement.
There is a functional difference when using this control. Any returned
deferred uid value returned by the LDAP server is accepted as a member.
No checks are performed to see if the user matches the search base and
search filters set for passwd entries.
Diffstat (limited to 'nslcd/ether.c')
0 files changed, 0 insertions, 0 deletions