ando@OpenLDAP.org wrote:
Log Message: make pseudoroot-bind-defer TRUE by default (part of ITS#5440 fix)
This is a change in a side-feature of back-meta, something that should not hurt in most cases, but definitely a change in the default behavior, established since back-meta was released. What's the best way to notify it?
p.
Ing. Pierangelo Masarati OpenLDAP Core Team
SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati@sys-net.it ---------------------------------------
Pierangelo Masarati wrote:
ando@OpenLDAP.org wrote:
Log Message: make pseudoroot-bind-defer TRUE by default (part of ITS#5440 fix)
This is a change in a side-feature of back-meta, something that should not hurt in most cases, but definitely a change in the default behavior, established since back-meta was released. What's the best way to notify it?
I'm being dumb, but notify what?
--On Monday, April 14, 2008 2:26 PM +0100 Gavin Henry ghenry@OpenLDAP.org wrote:
Pierangelo Masarati wrote:
ando@OpenLDAP.org wrote:
Log Message: make pseudoroot-bind-defer TRUE by default (part of ITS#5440 fix)
This is a change in a side-feature of back-meta, something that should not hurt in most cases, but definitely a change in the default behavior, established since back-meta was released. What's the best way to notify it?
I'm being dumb, but notify what?
Our user population.
--Quanah
--
Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration
Quanah Gibson-Mount wrote:
--On Monday, April 14, 2008 2:26 PM +0100 Gavin Henry ghenry@OpenLDAP.org wrote:
Pierangelo Masarati wrote:
ando@OpenLDAP.org wrote:
Log Message: make pseudoroot-bind-defer TRUE by default (part of ITS#5440 fix)
This is a change in a side-feature of back-meta, something that should not hurt in most cases, but definitely a change in the default behavior, established since back-meta was released. What's the best way to notify it?
I'm being dumb, but notify what?
Our user population.
Ah, right. Sorry ;-)
Gavin Henry wrote:
Pierangelo Masarati wrote:
ando@OpenLDAP.org wrote:
Log Message: make pseudoroot-bind-defer TRUE by default (part of ITS#5440 fix)
This is a change in a side-feature of back-meta, something that should not hurt in most cases, but definitely a change in the default behavior, established since back-meta was released. What's the best way to notify it?
I'm being dumb, but notify what?
Probably I was not clear enough. I changed the default behavior of a parameter, so now if it's not specified in slapd.conf (no back-config yet :) users may get unexpected changes in the behavior of back-meta. The change should not be critical, since the original behavior was sort of dumb, but one aspect is that it was related to authentication, and the change could result in a deferred discovery that what the administrative credentials used by the backend are no longer valid, i.e. a bind as the pseudorootdn would succeed but a subsequent operation could fail. Also, the response textual message and the logging might not clearly indicate the cause of the error, I need to check it.
p.
Ing. Pierangelo Masarati OpenLDAP Core Team
SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati@sys-net.it ---------------------------------------
-
Gavin Henry -
Pierangelo Masarati -
Quanah Gibson-Mount