[DIRSERVER-853] Ldap ref values incorrectly handled for referrals

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.5.1
• Assignee: Unassigned
• Reporter: Emmanuel Lécharny
• Created: 12/Feb/07 17:39
• Updated: 25/Aug/07 20:36
• Resolved: 25/Aug/07 20:36

Description

In case we have a referral, and if the LdapURLs stored in the ref values refers to Ldap serve r(if they start by ldap://), RFC 3296 states that :

"If the URI contained in a ref attribute value refers to a LDAP
[RFC2251] server, it MUST be in the form of a LDAP URL [RFC2255].
The LDAP URL SHOULD NOT contain an explicit scope specifier, filter,
attribute description list, or any extensions. The LDAP URL SHOULD
contain a non-empty DN"

The current ReferralService code does not really implement those controls. We can have empty DNs, scope, filter ...