pierangelo.masarati@polimi.it wrote:
On 01/31/2014 06:44 PM, michael@stroeder.com wrote:
pierangelo.masarati@polimi.it wrote:
On 01/31/2014 05:49 PM, quanah@OpenLDAP.org wrote:
What does administrative access mean?
It allows write when write is granted and the "relax" control is present. In practice, those who have "manage" access can perform those normally "prohibited" operations described in draft-zeilenga-ldap-relax.
I wish this explanation would catch all cases.
I vaguely remember that before the birth of draft-zeilenga-ldap-relax some (overlays?) misused the Manage DSA IT control for that purpose.
"manageDIT" was renamed to "relax" because it was too similar to "manageDSAit".
Yes, I know. I meant it literally mentioning "Manage DSA IT control".
Ciao, Michael.
-
michael＠stroeder.com