Emmanuel Duru wrote:

I wouldn't say that it is harmless.

I'm not saying your problem is harmless. I'm saying that having a rootdn of cn=config that is not within cn=config but with the rootpw is a violation of slapd's configuration rules (when the rootdn is not within the naming context, it cannot have a rootpw set).

To sum up, the problem is that when I modify frontend access control and then config access control (olcAccess attribute in both cases), I can not bind any more (neither with rootdn nor with any other dn). Concerning further releases, I will try later. Maybe I will wait for the 2.4.13...

Fine. p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando@sys-net.it -----------------------------------