--On Thursday, March 10, 2022 3:44 PM +0100 Jean-Luc Bourguignon
<bourguijl(a)gmail.com> wrote:
Hello Ulrich,
After a deep analyze of this "problem", it seems the chaining
process doesn't work when I use rootdn user to add entries in the DB via
the replicas.
If I add them via providers, creatorsname takes the correct rootdn (as
no chaining action here) but if I do it via replicas, I get replication
user's DN.
The chaining process works fine for normal users and gets proxied from
replicas to providers as I've authzto (regex) rules in the configuration
of my replication user.
I've tried to add a second authzto rule to my replication user as
authzto {1} dn.exact: cn="rootdn" but it didn't work. Besides that, I
created a fake rootdn entry in my DB, but same result.
What OpenLDAP release are you using?
--Quanah