Compability

LDAP and HTTP servers, and other software tested so far

web2ldap is known to work smoothly with the software/platforms mentioned here. If a software is not listed here does not mean it is not compatible unless it is listed in the negative list.

I'd appreciate if you use the feedback form to contribute to these compability notes.

[LDAP servers] [Web browsers] [Operating systems] [Web servers] [PKI products]

LDAP Servers

OpenLDAP 2.x
Open Source reference implementation of LDAPv3.
OpenLDAP 1.x
Open Source implementation of LDAPv2. Use is deprecated today - thus not tested since years.
Netscape Directory Server 4.x
This product is now rather historic but still sometimes deployed.
389 also known as Fedora Directory Server
Formerly known as Netscape Directory Server 6.x. Tested FDS 1.1.
iPlanet 5.x, SunONE 5.x and 6.x Directory Server
web2ldap even supports some extra features for these (like for FDS).
Novell eDirectory 8.x
With sub-tree renaming, subordinate flag and some other neat features. Last version tested: 8.8SP5. Some odds in sub schema (non-unique OIDs) can lead to serious interop issues.
Lotus Domino LDAP R4.5x and 4.6x
Sometimes behaviour of this LDAP server was very weird making it almost unusable. LDAPv2 if I remember correctly. Not tested since years.
Lotus Domino LDAP R5.x, R6.x and R7.0.x (sometimes weird)
Most times it works quite well. Persistent connections are dropped very fast - depends on the version I guess. web2ldap contains a work-around for the null-byte terminated string of the namingContexts attribute in Domino/LDAP's RootDSE. Recent tests were done with 7.0.3.
MS Active Directory

Tested with W2K, W2K3 and W2K8.
Various work-arounds were added to handle the broken sub schema in W2K:

Siemens DirX
Works just fine. Added support for searching the administrative sub entries.
CA eTrust Directory
Works just fine. Release 8.1 used as reference server for implementing the viewer for DIT structure rules and name forms in web2ldap.
Innosoft Distributed Directory Server (IDDS)
Only read-only tests were done and the product is not available anymore for years.
Critical Path InJoin 4.0 and Directory Server 4.2
Works without problems.
Syntegra
Read-only tests on a public address book server worked. Not sure which type and version though.
IBM Directory Server 5.1
Simply works. With subordinate flags, etc.
Apache DS 1.5
Simple operations have been reported to work just fine.
OpenDS 1.0 and 2.0RC
Seems to work just fine also with DIT structure rules and name forms.
OpenDJ
ForgeRock's fork of OpenDS which works just fine. Especially using more sophisticated LDAPv3 extended controls has been tested with this.
Isode's M-Vault LDAP/X.500 Directory Server
Some glitches were resolved in web2ldap 1.0.7 to work with the M-Vault Directory Server.
eB2Bcom's View500
Works also with DIT structure rules and name forms. web2ldap honors the operational attribute governingStructureRule.

Web Browsers

Content Enhanced - Use Any Browser

Mozilla
Mozilla 1.x already had very good CSS support.
Recent versions of Firefox and Seamonkey simply works and are used as a reference.
Konqueror
The web browser and file manager of the KDE project: Note the input forms enclosed in <fieldset> were not displayed by older versions. (see KDE bug #44643 RESOLVED).
Microsoft Internet Explorer
Support for CSS depends very much on the version used. The modern CSS files shipped with web2ldap likely does not work with IE 6.0 and before. Some minor CSS glitches with IE 7.0.
Opera
Commercial browser. Aims to be fast and small. Also very good CSS support.
Google Chrome
Simply works.
lynx
A text-mode browser - still supported for those who have to use a terminal.
w3m
Another text-mode browser capable of handling tables and displaying images (if the terminal allows it).

Operating Systems

Linux
Please do not use outdated RPM packages...
Windows 32
Sucessfully tested.
FreeBSD
There is even a FreeBSD port of web2ldap.
Solaris 8, 9 and 10
You can grab some of the packages needed from www.sunfreeware.com.

Web Servers

Apache HTTP Server
I don't have to write any explanation about this one...
lighttpd
You have to spawn the web2ldap FastCGI process in a separate startup script with spawn-fcgi.

PKI products

Entrust Authority
Works fine with directory structure and content written by Entrust Authority6.0 (tested with Siemens DirX and CP InJoin). Displays encryption certificate in attribute userCertificate just fine. The Entrust specific attributes (e.g. roaming profiles) can be downloaded as binary data.
RSA Keon CA
This product ships with a pretty ancient LDAPv2 server. Last time I checked it worked to display userCertificate attribute which is stored in old {ASN.1} style.

Negative List

Unfortunately web2ldap cannot work with the following misbehaving software:

Netmeeting
Many Netmeeting directory servers (most times DNS alias starting with ILS) contain invalid NUL-terminated strings in some rootDSE attributes. This can't be worked around easily without breaking LDAP implementation.
I also did not find a ILS server which allows non-exact searching or any other useful stuff for general LDAP use.
Netscape Communicator 4.x
Chokes on rendering modern CSS rules. CSS files shipped with web2ldap distribution likely does not work with this anymore. Anyway you should not use this ancient browser anymore. If you still have to use it consider writing your own simple CSS file.