Re: Question: back-ldap connection retrying and rebinding necessary?
Tero Saarni <[email protected]> Mon, 22 Feb 2021 08:20:06 +0000
| Newsgroups | gmane.network.openldap.devel |
|---|---|
| Message-ID | <HE1P189MB049138B353CBC88D0C1BC6E088819@HE1P189MB0491.EURP189.PROD.OUTLOOK.COM> |
Howard Chu wrote: > The rebind-as-user option was originally only used when chasing referrals. With > the current code, your choices are to use proxyAuthz to assert a user identity > on reconnect, or simply fail instead of reconnecting. Personally I'd lean towards > the latter. For shared connections retrying is still appropriate, because we only > share connections for special cases, like rootdn usage where we already know we > can establish the correct credentials. Ok, thanks. I would like to work with this issue (in context of [1]). To summarize my understanding: when proxy currently would retry non-shared connection, it can fail instead and disconnect the client. Client can then continue by re-establishing connection and binding again. -- Tero [1] https://bugs.openldap.org/show_bug.cgi?id=9468