Andreas Hasenack wrote:
I find this a bit unexpected. Suppose someone manages to create an entry matching rootdn. Then this person would be able to become rootdn, bypassing the rootpw setting in slapd.conf.
If you're scared about the power of rootdn switch it off.
Ciao, Michael.