Re: what is wrong with my permissions?

Igor Shmukler igor.shmukler@gmail.com writes:

I want it to be something like: olcAccess: {1}to * by dn="cn=config" manage

Basically, I want dn=cn=config to have full root access over everything. I also want this password ideally to be password protected.

Does it make sense? Can it be done?

Sure. Add this olcAccess attribute to all the databases. Or to the frontend database, but check man slapd.access for the priorities and defaults. For what it's worth, I use the syntax

to * by dn.exact=cn=config

(which should be equivalent to yours).