Changing ACLs in dynamic configuration off-line

Friday, 13 January 2012

When we want to do some non-trivial re-engineering in ACLs, on-line 
configuration using ldapmodify might be cumbersome.

So I think we could slapcat the config database, change ACLs in the 
output, and slapadd it while the server is offline.

So, if we have a set of >100 ACL rules and we want to add one ACL rule 
after, say, 22, would we have to *manually* renumber all the ACLs after 
the new 23 so that they are numbered n+1? Or, when the config db is 
read, is OpenLDAP able to resolve such conflicts (two ACLs with the same 
number) and renumber automatically? If so, what is the logic?

(Maintenance of ACLs in the dynamic configuration remains one of my 
concerns.)

Thanks,
Nick

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007