Dieter Kluenter wrote:
Vladimir Dzhuvinov vd@valan.net writes:
The admin guide mentions a "manage" privilege, but doesn't detail its purpose. It is listed as the top-level privilege, but what extra rights does it give over "write"?
relax, formerly known as manageDSAiT, primarily required to manage dynamic directory service, man slapo-dds(5) and RFC-2589.
The "manage DSA IT" control is different from "manage DIT" control (now relax rules control). The first is mainly for maintaining referral entries whereas for the latter see draft-zeilenga-ldap-relax-00.txt.
Ciao, Michael.