2597 - Help with ldaps

Status: RESOLVED INVALID

(Directory :: LDAP Tools, defect, P2)

Description

[killam]

Not sure if this is the correct place to post it,
so if not well please be patient. We are running Netscape
Directory Server 3.1 and notice that a user with authenticate
fine for a while, and then won't authenticate, with ldap_simple_bind.
After comparing dn and the password and confirming they are correct,
to get it working again, the whole ldap entry must be removed and
recreated. Any ideas what could be causing this?

Thanks, Jason

Comment 1

[leger]

Setting all current Open/Normal to M4.

Comment 2

[leger]

Clearing "M" field since Directory product is not used for 5.0 specific project
bug metrics and will mess up our queries on milestones.

Comment 3

[chuckb]

This isn't really a bug.

But here is a possible reason the binding fails.

If you have enabled password policy, and you are not setting the LDAP
handle to default to LDAP V3, you will not receive the password policy
control.  Try calling ldap_set_option() as below:

    int version = LDAP_VERSION3;
    if ( ldap_set_option( ld, LDAP_OPT_PROTOCOL_VERSION, &version)
         != LDAP_SUCCESS ) {
      printf( "AHHHHK couldn't set V3 protocol -- ldap_set_option()");
      return (1);
    }

Don't for get that you will need to check for a returned control after
ldap_result().