On 7/7/20 3:11 PM, Côme Chilliet wrote:
Le Tue, 7 Jul 2020 14:52:30 +0200, Michael Ströder michael@stroeder.com a écrit :
Do you actually see any value of attribute 'supportedControl'?
If not, did you explicitly request the attribute 'supportedControl' when reading rootDSE or used '+' in the attribute list?
I use '+', and it does return supportedControl.
On which platforms are you testing FusionDirectory?
Debian. Here is the setup for the automated test ldap server: https://github.com/php/php-src/pull/5794/files#diff-49f45f40446e443fc480bb7d...
The author has the same problem as I do: https://github.com/php/php-src/pull/5794#issuecomment-652933484
Sorry, I won't wade through all this.
As said: Debian has slapo-ppolicy.
But you should simply check whether ldapsearch returns the attribute 'supportedControl' or whether possibly ACLs deny access. E.g. try first ldapsearch option -D <root-DN> to authenticate as rootdn for which no ACLs are applied.
Ciao, Michael.