--On Friday, May 03, 2019 5:22 PM +0000 dominiks.mail@gmx.net wrote:

2. flags=3Doverride

After I added the flags=3Doverride setting in the idassert-bind section the problem was gone and everything works for me. I don't know if it's a good approach but at least it works for now with our openLDAP backend server.

Prior to OpenLDAP 2.4.33 where ITS#7403 was fixed (8829115c76), back-ldap would always behave as if the "override" flag had been set if the idassert-bind directive has been configured. I.e., the previously working configuration depended upon a bug and that bug was fixed.

This ITS will be closed as back-ldap is functioning as designed and documented in the slapd-ldap(5) man page.

Regards, Quanah

--

Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com