btb@bitrate.net wrote:
hi-
i'm running slapcat from a daily cron job to back up cn=config and other databases. i've recently updated from 2.4.21 to 2.4.23, and notice now in the output of slapcat, messages such as
slapcat -b 'cn=config' -l 'config.ldif'> /dev/null
PROXIED attributeDescription "OU" inserted. PROXIED attributeDescription "DC" inserted.
a bit of searching seems to indicate that these shouldn't be cause for concern, and are just informative messages.
Correct.
Usually, these messages occur because one of your cn=config entries has a modifiersName or some other attribute containing a DN using these attributes, and the config backend hasn't read the cn=schema,cn=config tree yet.
This situation never happened in 2.3 because only "cn=config" had write access to the cn=config tree. But since 2.4 allows you to set the ACLs so that arbitrary users can write to the tree, you can run into these cases.