On 20:17:53 wrote Harry Jede:> Hello,
>
> i wish to get search answers without referrals
>
> this works with openldaps ldapsearch:
>
> # ldapsearch -LLLb dc=ad,dc=schule,dc=lan -E
> '1.2.840.113556.1.4.1339' cn=user1 dn SASL/GSSAPI authentication
> started
> SASL username: administrator at AD.SCHULE.LAN
> SASL SSF: 56
> SASL data security layer installed.
> dn: CN=user1,CN=Users,DC=ad,DC=schule,DC=lan
>
>
> however, ldbsearch needs the control name, but which one?
>
> all names I have found in ldb.h failed:
>
> # ldbsearch -H ldap://dc0 -b dc=ad,dc=schule,dc=lan
> --controls=domain_scope cn=user1 dn parsing controls failed: Invalid
> control name: 'domain_scope'
>
> # ldbsearch -H ldap://dc0 -b dc=ad,dc=schule,dc=lan
> --controls=DOMAIN_SCOPE cn=user1 dn parsing controls failed: Invalid
> control name: 'DOMAIN_SCOPE'
>
> ldbsearch -H ldap://dc0 -b dc=ad,dc=schule,dc=lan
> --controls=LDB_SEARCH_OPTION_DOMAIN_SCOPE cn=user1 dn parsing
> controls failed: Invalid control name:
> 'LDB_SEARCH_OPTION_DOMAIN_SCOPE'
The control name is search_options.
This hint comes from ldbsearch:
syntax: crit(b):search_options(n)
note: b = boolean, n = number
However,
crit is not honored, one may use 0 or 1
search_options, 0 (the default) turns referrals on, 1-15 turns referrals
off, >16 produces an error
So, a working example is:
# ldbsearch -H sam.ldb --controls "search_options:0:1" cn=user1 dn
# record 1
dn: CN=user1,CN=Users,DC=ad,DC=schule,DC=lan
# returned 1 records
# 1 entries
# 0 referrals
Next try, was to get rid of the other annoying #lines. so I played with
the -v option. No change. But if one use +v ...
I will stop here. grep is my friend :-)
--
Regards
Harry Jede