diff -Naur ../../lsc-redmine/redmine/vendor/plugins/ruby-net-ldap-0.0.4/lib/net/ldap.rb vendor/plugins/ruby-net-ldap-0.0.4/lib/net/ldap.rb
--- ../../lsc-redmine/redmine/vendor/plugins/ruby-net-ldap-0.0.4/lib/net/ldap.rb	2009-05-17 11:09:35.000000000 +0200
+++ vendor/plugins/ruby-net-ldap-0.0.4/lib/net/ldap.rb	2009-07-01 10:58:29.000000000 +0200
@@ -271,6 +271,12 @@
     SearchScope_WholeSubtree = 2
     SearchScopes = [SearchScope_BaseObject, SearchScope_SingleLevel, SearchScope_WholeSubtree]
 
+    DerefAliases_Never = 0
+    DerefAliases_Search = 1
+    DerefAliases_Find = 2
+    DerefAliases_Always = 3
+    DerefAliasesArray = [DerefAliases_Never, DerefAliases_Search, DerefAliases_Find, DerefAliases_Always]
+
     AsnSyntax = {
       :application => {
         :constructed => {
@@ -555,6 +561,7 @@
     # * :return_result (a boolean specifying whether to return a result set).
     # * :attributes_only (a boolean flag, defaults false)
     # * :scope (one of: Net::LDAP::SearchScope_BaseObject, Net::LDAP::SearchScope_SingleLevel, Net::LDAP::SearchScope_WholeSubtree. Default is WholeSubtree.)
+    # * :deref (one of: Net::LDAP::DerefAliases_Never, Net::LDAP::DerefAliases_Search, Net::LDAP::DerefAliases_Find, Net::LDAP::DerefAliases_Always. Default is Never.)
     #
     # #search queries the LDAP server and passes <i>each entry</i> to the
     # caller-supplied block, as an object of type Net::LDAP::Entry.
@@ -1134,6 +1141,9 @@
       scope = args[:scope] || Net::LDAP::SearchScope_WholeSubtree
       raise LdapError.new( "invalid search scope" ) unless SearchScopes.include?(scope)
 
+      deref = args[:deref] || Net::LDAP::DerefAliases_Never
+      raise LdapError.new( "invalid alias dereferencing value" ) unless DerefAliasesArray.include?(deref)
+
       # An interesting value for the size limit would be close to A/D's built-in
       # page limit of 1000 records, but openLDAP newer than version 2.2.0 chokes
       # on anything bigger than 126. You get a silent error that is easily visible
@@ -1147,7 +1157,7 @@
         request = [
           search_base.to_ber,
           scope.to_ber_enumerated,
-          0.to_ber_enumerated,
+          deref.to_ber_enumerated,
           0.to_ber,
           0.to_ber,
           attributes_only.to_ber,