A method, program and system for authenticating LDAP referral searches are provided.
The invention comprises receiving a bind request from a LDAP referred search request
and then searching the local directory for an entry corresponding to the distinguished
name (DN) of the bind request. If an entry for the bind DN is located within the
local directory, the bind request is authenticated. If an entry for the bind DN
is not found in the local directory, a defined reference server is checked for
the prefix of the bind DN. If the prefix for the bind DN is located in the reference
server, the reference server is contacted for authentication, which is performed
using a root DN. If an entry for the bind DN is not found in either the local directory
or reference server, the bind request cannot be authenticated and is denied.