...
Based on the entry point, (via protocol or embedded JNDI) two mechanisms exist for controling the underlying Referral handing mechanism. One uses the ManageDsaIT control and the other uses the Context.REFERRAL property. The presence of the ManageDsaIT control is the same as setting the environment property to ignore or not even setting the property in the environment since by absence the property is defaulted to ignore.
| Note |
|---|
Odd as it sounds, LDAP servers allow entries to subordinate to referrals when they are added with the ManageDsaIT control present. One might suspect that referrals are leaf entries without subordinates but when the ManageDsaIT control is present they are like any other entry and hence they can have subordinates. Without the ManageDsaIT control's presence during search and other operations, child and descendant nodes under a referral will not be seen.adding an entry which is a subordinate of an existing referral into the server seems to be a possibility, using the ManageDSAIT control. This is not the case. As any modification of the data should keep the server in a consistent state, such an addition is obviously forbidden. (this has been discussed here |
Referral Handling Scenarios
...