Re: [Exim] LDAP, AUTH, PAM and Lookups

Top Page
Delete this message
Reply to this message
Author: Barry Pederson
Date:  
To: Philip Hazel
CC: exim-users
Subject: Re: [Exim] LDAP, AUTH, PAM and Lookups
Philip Hazel wrote:
>
> On Fri, 17 Nov 2000, Barry Pederson wrote:
>
> > If there are no easy workarounds, I wonder if it wouldn't be worthwhile to add
> > another type of LDAP lookup to Exim, specifically for looking up DNs,
> > something like ${lookup ldapdn {...}}. I'd be willing to take a stab at this
> > if no-one has an easier idea.
>
> It seems like a plausible requirement, though I know very little about
> LDAP, and do not use it myself. A better approach than another lookup
> type might be to add another pre-request option like the USER= and PASS=
> ones. But I don't know if there's a suitable LDAP call to look up the
> DN. I guess there ought to be...


Yes, you can use ldap_get_dn(). I thought about the pre-request idea too, but
after looking at exim's ldap.c, I thought that might be pretty ugly. Adding a
new ldap search type doesn't require many changes, and I have put together a
patch that seems to work.

One minor thing that needs to be worked out is whether the Solaris7 LDAP
ldap_get_dn() result needs to be freed with free() (as UMich and OpenLDAP 1
do) or ldap_memfree() (as Netscape and OpenLDAP 2 do). Can someone point me
to an online Solaris7 LDAP manual?

    Barry