60 likes | 146 Views
DC/X521 gateway What it does. With each qeury it tries to find out the responsible ldap server and returns a referral for that server. DC/X521 gateway How?. Translates the DN to a DC-DN and a X521-DN. Queries default server. DNS-query for the SRV record. Returns referral.
E N D
DC/X521 gatewayWhat it does With each qeury it tries to find out the responsible ldap server and returns a referral for that server.
DC/X521 gatewayHow? • Translates the DN to a DC-DN and a X521-DN. Queries default server. • DNS-query for the SRV record. • Returns referral. • Implemented by adapting DNS back-end code of OpenLdap v. 2.0.7
DC/X521 gatewaymore heuristic approaches • Adapt the domain part of the DC_DN and put ldap. in front of it and try this LDAP-host. • Go up one or more domain parts and do a SRV-record look-up and/or put ldap. in front of it.
DC/X521 gatewayproblems • Which parts of the DN must/can be translated? • LDAP search takes time. • At this moment all searches are done as anonymous. No SASL, KERBEROS etc.
DC/X521 gatewayto do • Implement heuristic approaches • Optimise • By changing sequence of searches • By implementing time-outs in ldap searches • etc.