I am having some issues with OpenLDAP and Spring security, where the latter does a search with the whole path in dn (filter), and an empty base. OpenLDAP does not like this, and the query fails. The problem is that I have no control over the query, so I am thus wondering if it is possible to configure OpenLDAP to allow such queries.
Some details on how this works:
Spring first does a search for a user, with something like this:
base:ou=something,ou=something,dc=oh,dc=my,dc=god
filter:cn=someUsername
Then, it gets back a result, where the whole dn is put in, and base is an empty String, like this:
base:
filter:cn=someUsername,ou=something,ou=something,dc=oh,dc=my,dc=god
Then, it uses this result for a new search against the LDAP, which then fails.
cn
that has the valuesomeUsername,ou=something,ou=something,dc=oh,dc=my,dc=god
.