On 3.12.2012 21:36, Stephen Gallagher wrote:
On Mon 03 Dec 2012 11:14:28 AM EST, Jan Cholasta wrote:
> Hi,
>
> the attached patch fixes <
https://fedorahosted.org/sssd/ticket/1660>.
Could we do this as a check during the RootDSE lookup (similar to how we
test for the Active Directory matching rule support) instead of doing so
when we attempt a deref lookup? It would more consistently report the
issue during startup as well.
Sure, but can we really trust this check? AFAICT in OpenLDAP deref is
configured per naming context, which means it might not be available in
RootDSE, even when it is available in our search base.
Honza
--
Jan Cholasta