Full_Name: Howard Chu Version: 2.4.39 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (78.155.233.73) Submitted by: hyc
As discussed in this thread http://www.openldap.org/lists/openldap-technical/201312/msg00069.html
slapacl leaves an open reader txn as soon as it calls mdb_tool_dn2id_get. If the ACLs in effect need to read any other entries, they call be_entry_get. mdb_entry_get doesn't know about the reader txn opened by the tool code, which causes this error.
For 2.5 we should probably unify the slapd and tool entry points, there's no good reason for many of these tool APIs to exist; they're just redundant work.