--On Tuesday, January 03, 2017 2:49 PM +0100 Matthieu Cerda matthieu.cerda@nbs-system.com wrote:

Le 03/01/2017 à 08:05, Ulrich Windl a écrit :

...

...

...

...

Quanah Gibson-Mount quanah@symas.com schrieb am 03.01.2017 um 00:11 in

Nachricht <F365AC223D2A1E22A5345243@[192.168.1.30]>:

...

(...)

Note the bit about "all the operations, ..."

If you think of a way to reword it that you feel is a better explanation, that could certainly be considered. :)

I think a notice who is the modifier on ppolicy changes would be woth it; specifically if it's related to RootDN ;-) I think I had already asked earlier about some notice on ACLs that ppolicy may or may not need to work.

Well I certainly didn't understand the message as 'every operation will be done assuming the rootdn identity' indeed.

I agree with Ulrich, maybe a small note in the manpage saying exactly that might help, just in case ?

Here is a proposal patch on slapo-ppolicy.5 manpage to clarify that.

Submissions need to be via the ITS system, http://www.openldap.org/its/

Thanks, Quanah

--

Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com