-
Type: Task
-
Resolution: Works as Designed
-
Priority: Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
Labels:None
-
Server Security
SERVER-70912 revealed that a bug was introduced into the server in 5.1 that causes crashes when chasing LDAP referrals. This bug was only discovered via HELP-38838 because we do not currently have any existing tests for LDAP referrals.
Unfortunately, adding a test for this does not seem trivial. Our existing mock LDAP server and LDAP proxy both use the ldaptor package, which explicitly does not support referrals yet. A cursory investigation of alternative third-party Python libraries did not seem to reveal any promising alternatives.
To add test coverage for LDAP referrals, we need to do the following:
- More thoroughly investigate third-party alternatives for ldaptor that support referrals and use them if possible. This currently seems unlikely.
- If 1) is not possible, possibly explore forking ldaptor and contributing to add referral support so we can use it.
- Alternatively, work with the Build team to set up an additional LDAP test server that can work with the current one for referrals.