Ulrich Windl wrote:
The manual page slapd.access explains: "The disclose access level allows disclosure
of information on error."
I don't quite understand what this is saying: Can the requester find out a specific
object or attribute exists without actually reading its value?
Basically, yes. If you attempt an operation on an entry that doesn't have Disclose
you'll get a NO_SUCH_OBJECT error instead of whatever other error code might have
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/