Changeset 34

Timestamp:

12/22/07 18:32:54 (1 year ago)

Author:

bkuhn

Message:

• Apparently, access to dn.base="" by * read is needed
  

Files:

• trunk/configs/ldap/slapd.conf (modified) (1 diff)

trunk/configs/ldap/slapd.conf

@@ -161 +161 @@
-       by dn.regex="uid=apache,ou=roles,dc=example,dc=org" read
-       by dn.regex="cn=.*,ou=staff,ou=people,dc=example,dc=org" read
+
+access to dn.base="" by * read
+
+# Ensure read access to the base for things like supportedSASLMechanisms.
+# Without this you may have problems with SASL not knowing what mechanisms
+# are available and the like.  Note that this is covered by the 'access to
+# *' ACL below too but if you change that as people are wont to do you'll
+# still need this if you want SASL (and possible other things) to work
+# happily.