Tide
2013-May-29 10:00 UTC
[Samba] [samba4 dc ldap] LDAP_SERVER_FAST_BIND_OID is currently not supported?
I'm testing LDAP authentication against samba4 using fast bind connection control. I got the following java exception ---------------------------------------- javax.naming.NamingException: [LDAP: error code 1 - Operations Error] ---------------------------------------- and got error message from samba ---------------------------------------- ldapsrv_do_call: Critical extension 1.2.840.113556.1.4.1781 is not known to this server ---------------------------------------- Is fast bind control not yet supported? Any plan to support it? related links: JNDI, Active Directory and Authentication (part 5) (Fast Bind) https://forums.oracle.com/forums/thread.jspa?threadID=1155584&tstart=0 LDAP_SERVER_FAST_BIND_OID http://msdn.microsoft.com/en-us/library/aa366981.aspx
Andrew Bartlett
2013-May-30 05:42 UTC
[Samba] [samba4 dc ldap] LDAP_SERVER_FAST_BIND_OID is currently not supported?
On Wed, 2013-05-29 at 10:00 +0000, Tide wrote:> I'm testing LDAP authentication against samba4 using fast bind connection > control. I got the following java exception > ---------------------------------------- > javax.naming.NamingException: [LDAP: error code 1 - Operations Error] > ---------------------------------------- > > and got error message from samba > ---------------------------------------- > ldapsrv_do_call: Critical extension 1.2.840.113556.1.4.1781 is not known to > this server > ---------------------------------------- > > Is fast bind control not yet supported? Any plan to support it?It isn't currently supported, but shouldn't be too hard to add. The harder part is actually writing the tests, implementing the OID is mostly a matter of skipping code, and listing it our known OID list in source4/libcli/ldap/ldap_controls.c. Please file a bug, and if you like you could attempt a patch, or at least help us write a testsuite. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org