https://bugs.openldap.org/show_bug.cgi?id=10299
--- Comment #7 from Howard Chu hyc@openldap.org --- (In reply to Ondřej Kuzník from comment #5)
On Thu, Mar 27, 2025 at 03:15:40PM +0000, openldap-its@openldap.org wrote:
I don't understand any of your comment at all, but clearly the SEGV is because you have an ACL that references a group and the group entry couldn't be retrieved from the DB because in dryrun mode none of the DBs are opened. If you want this slapacl invocation to work, don't use dryrun mode.
The question is:
Is there a way to have slapacl avoid the SEGV but return with an actual error in this case?
I think SEGV is a pretty definitive error code already.
We could also just print a message when slapacl starts up saying "using dryrun mode may trigger SEGV if ACL evaluation requires DB access"