[Koha-bugs] [Bug 17113] New: Unable to search multi-domain Active Directory forest due LDAP required base

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17113

            Bug ID: 17113
           Summary: Unable to search multi-domain Active Directory forest
                    due LDAP required base
 Change sponsored?: ---
           Product: Koha
           Version: 3.22
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P5 - low
         Component: Authentication
          Assignee: gmcharlt at gmail.com
          Reporter: helpdesk at neci.edu
        QA Contact: testopia at bugs.koha-community.org
                CC: dpavlin at rot13.org

Auth_with_ldap currently prevents the use of an empty base due to the presence
of

my $base = $ldap->{base} or die ldapserver_error('base');

An AD Global Catalog search will automatically query all domains in a forest if
a blank base is specified, but otherwise limits the search to the domain
matching the base. Not being able to specify an empty base makes things
difficult if the forest contains disjoint domains that cannot be combined into
a single search base.

(Uncertain how this interacts with the work on bug 8993, but being able to use
the forest wide Global Catalog searches removes a lot of the contortions needed
to direct requests to the correct host responsible for a domain.)

-- 
You are receiving this mail because:
You are watching all bug changes.