ldapv3.pdf 7947KB Apr 17 2013 11:30:42 AM - mirror omadata

Non-Conformists
pam_ldap
The current (as of RedHat 7.2) pam_ldap modules from PADL to not
support resolving LDAP host location via DNS SRV. Since, where
NSS LDAP is used PAM LDAP is almost always deployed, this
severely limits the actual usefulness of DNS SRV at this point
OpenLDAP utilities
The ldap utilities seem to still require a BASE directive in
/etc/openldap/ldap.conf, but do resolve the LDAP host using SRV
records. This annoyance can be worked around by setting the
LDAPBASE environment variable to the default base.
export LDAPBASE=`hostname | sed "s/\./,dc=/g" | cut -f2,3 -d","`