Hi!
The manual page slapd.access explains: "The disclose access level allows disclosure of information on error."
I don't quite understand what this is saying: Can the requester find out a specific object or attribute exists without actually reading its value?
Regards, Ulrich
Ulrich Windl wrote:
Hi!
The manual page slapd.access explains: "The disclose access level allows disclosure of information on error."
I don't quite understand what this is saying: Can the requester find out a specific object or attribute exists without actually reading its value?
Basically, yes. If you attempt an operation on an entry that doesn't have Disclose access, you'll get a NO_SUCH_OBJECT error instead of whatever other error code might have applied.
openldap-technical@openldap.org