Shibboleth Developers

[Daniel Fisher <>]

On Tue, Jun 7, 2011 at 9:26 AM, Dan McLaughlin
<>
 wrote:
> Hi Daniel,
>
> Actually dereference alias "never" means "Never dereferences aliases".

Correct. This is a server side directive. You're telling the server
not to dereference.

>  So if you have an alias it will not be returned.

Incorrect. Aliases will be returned if they are found by your search
filter. Since the server is *not* dereferencing the aliases, they will
be returned as entries.

> When we leave the default "always" then the alias and the object is 
> references is
> returned and we get the exception about too many results returned.

You should not receive any aliases entries when using that setting. If
you are, the server is not dereferencing them and something is wrong.

> The documentation from Sun/Oracle confirms my understanding.
> http://download.oracle.com/javase/jndi/tutorial/ldap/misc/aliases.html

Those docs really need a few more examples. I can see why they are confusing.

--Daniel Fisher