364
Novell eDirectory 8.8 Administration Guide
no
vd
ocx
(e
n)
6 Ap
ril 20
07
If you mark the Always Refer option, you are allowed to enter a default referral. The Default
Referral field enables you to glue two different vendor LDAP servers together and build your own
Directory tree.
Scenario: Using a Default Server—
You have an LDAP tree. One part of the tree is serviced by
eDirectory. A subordinate partition is serviced by iPlanet. In the Default Referral field, you place a
URL that references the iPlanet server. An LDAP client requests a search.
Unable to resolve the base DN, the LDAP server sends the client the string in the Default Referral
field. The referral instructs the LDAP client to look in the place specified in the URL The LDAP
client contacts the iPlanet server, which completes the search.
Whenever a default referral is configured and the server doesn't find the base DN being searched for,
the client receives the default referral.
The format for a referral is an LDAP URL (for example, LDAP://123.23.45.6:389).
When the LDAP server sends a default referral to a client (because the base DN was unavailable),
the server appends an additional forward slash (/) and the DN that the client was looking for. The
default referral and the appended information go to the client. The client sends the search request to
the server specified in the default referral.
The LDAP Group object has a string field for the default referral. The LDAP server treats that data
as a string. There is no validation. Whatever is entered is prepended to the referral. Some data is
appended to the referral. The LDAP server expects the string to look like a URL.
When clients get referrals to other eDirectory servers that are running LDAP, the client receives two
referrals per server:
A referral directing the client to the clear-text port
A referral directing the client to the secure port
To differentiate between the two referrals, the clear-text referral states ldap:// and the secure port
displays ldaps://.
A referral from the server appends the port number.
Setting Referrals for Other Operations
The historical referral option setting only applied to the search operation. To provide a comparable
option for other operations, the ldapOtherReferralOption attribute is used. This attribute allows the
same values and controls the behavior for non-search operations (excluding bind, which never sends
a referral).
Referral Flitering
If you have multiple replica servers running in a tree and have configured LDAP server(s) to return
referrals using the Prefer Referrals/Always Refer option, then the LDAP server will return referrals
if the object identified by DN in the requested operation is not present locally. In such a case, LDAP
client sends a request to the server, and the server returns a referral list of all the LDAP servers
holding that object. Using this referral list, LDAP clients will follow any of these referrals to
perform the operation. If the client chooses to follow the referral to a lresouce starved server or a
server that is located across a slow link, clients would see a slow response from the server. This in
turn affects the performance of the LDAP client.
Summary of Contents for EDIRECTORY 8.8 SP2
Page 4: ...novdocx en 6 April 2007...
Page 116: ...116 Novell eDirectory 8 8 Administration Guide novdocx en 6 April 2007...
Page 128: ...128 Novell eDirectory 8 8 Administration Guide novdocx en 6 April 2007...
Page 255: ...256 Novell eDirectory 8 8 Administration Guide novdocx en 6 April 2007...
Page 406: ...408 Novell eDirectory 8 8 Administration Guide novdocx en 6 April 2007...
Page 563: ...566 Novell eDirectory 8 8 Administration Guide novdocx en 6 April 2007...
Page 573: ...576 Novell eDirectory 8 8 Administration Guide novdocx en 6 April 2007...
Page 601: ...604 Novell eDirectory 8 8 Administration Guide novdocx en 6 April 2007...
