Le 11 oct. 2018 =C3=A0 18:32, Howard Chu hyc@symas.com a =C3=A9crit =
:
=20 goudal@bordeaux-inp.fr wrote:
Full_Name: Fr.d.ric Goudal =20 Solution=20 -remove by hand the dn: uid=3Dfoo,ou=3Dbar,dc=3Dmy,dc=3Ddomain, =
that remove the
glue object
- create by hand the ou=3Dbar,dc=3Dmy,dc=3Ddomain
=20 What IMHO slapd should do :
- either check that it does not add an object before its parent =
objects
=20 No. This behavior is already documented in the Syncrepl specification. =20
- either convert the glue object to the correct object when the real =
creation is
needed.
=20 The slapd consumer already does this when running on a local database. =
It would
require Manage privileges when running through back-ldap. Check your =
back-ldap configuration.
Well=E2=80=A6 I=E2=80=99v read 5 time the documentation on my setup, = never seen the manage privilege mentioned anywhere=E2=80=A6 Even in the example given for the backend configuration the acls don=E2=80= =99t mention this =C2=AB manage =C2=BB privilege :
=46rom page : = https://www.openldap.org/doc/admin24/replication.html#Syncrepl
# Give the replica DN unlimited read access. This ACL may need to be # merged with other ACL statements.
access to * by dn.base=3D"cn=3Dreplicator,dc=3Dsuretecsystems,dc=3Dcom" = write by * break
access to dn.base=3D"" by * read
access to dn.base=3D"cn=3DSubschema" by * read
access to dn.subtree=3D"cn=3DMonitor" by dn.exact=3D"uid=3Dadmin,dc=3Dsuretecsystems,dc=3Dcom" = write by users read by * none
access to * by self write by * read
Wel.. I can accept it=E2=80=99s a documentation bug=E2=80=A6but where is = the correct documentation ?
f.g.