Bug 2350 - [patch] LDAP Dereference Support
Summary: [patch] LDAP Dereference Support
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: User/Group Accounts (show other bugs)
Version: 3.0.11
Hardware: All All
: P3 enhancement
Target Milestone: none
Assignee: Björn Jacke
QA Contact: Samba QA Contact
Depends on:
Reported: 2005-02-15 18:41 UTC by Dan Cox
Modified: 2009-12-14 01:42 UTC (History)
1 user (show)

See Also:

LDAP Deref Support (3.67 KB, patch)
2005-02-15 18:44 UTC, Dan Cox
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Dan Cox 2005-02-15 18:41:26 UTC
Samba should support dereferencing aliased objects in LDAP (most LDAP based
applications support this).

This allows one to do interesting things like maintaining Samba in a separate
base ou (ou=Samba,dc=example,dc=net), but still allowing Samba to see the
posixAccounts under (ou=People,dc=example,dc=net) using alias objects for groups
and/or accounts.

If you use ldap deref = searching, Samba will see the posixAccounts that you
have created aliases for under the separate base ou, but will attach the Samba
account to the aliased object itself instead of the posixAccount object. This
makes it possible to have one posixAccount belong to separate domains.
Comment 1 Dan Cox 2005-02-15 18:44:40 UTC
Created attachment 966 [details]
LDAP Deref Support

Adds LDAP alias dereferencing support. Applies cleanly against Samba
3.0.(9,10,11). I've been using this in production for a number of months now
just fine.

Adds smb.conf option:
ldap deref = (never | searching | finding | always)

These are LDAP standard options.
Comment 2 Björn Jacke 2009-12-10 15:55:16 UTC
Thank you very much. A slightly modified version is in master now. The default of ldap deref is "default", which means the settings from the global ldap.conf are being used.
Comment 3 Karolin Seeger 2009-12-14 01:42:30 UTC
Will be included in Samba 3.5.0pre2 and higher.