[python-ldap] Querying Active Directory excessively slower than querying eDirectory

[Michael Ströder]

Thorsten Kampe wrote:
> Please note that "hints" are only useful if the "hinted one" is on the
> same level knowledgewise as the one who gives the hint.

The "hinted one" could also assume that a "hint" is given for good reasons and
ask back if he/she does not understand the hint.

> I did not know
> that python-ldap actively tries to follow the referrals and I did not
> know how to turn it off.

It's the default behaviour of the OpenLDAP libs.

MS AD makes use of LDAPv3 referrals. But it assumes that the clients chase the
referrals binding with the standard Windows identity (with GSSAPI/Kerberos).
But this behaviour is not standardized in LDAPv3 RFCs. So basically switch off
automatic referral chasing is always a good idea.

Ciao, Michael.