Re: derefDN locking problem (ITS#597)

[Kurt@OpenLDAP.org]

At 11:53 AM 6/18/00 -0400, wesley.craig@umich.edu wrote:
>Is alias support in LDAPv2 a UMICH extension?

No. LDAPv2 has alias support in the protocol.  U-Mich never
implemented aliases.  We did back in 1.1... but it's a bit
problematic.  Even the 2.0 alias code, though more stable,
isn't feature complete (when "searching", it only supports
aliases which refer to leafs).

>If so, I'd suggest
>disabling it in the OpenLDAP 1.2 branch and not worrying about it.

I suggest folk avoid aliases in 1.2 until fixed.  Placing the
following ACL should stop aliases from being added to the
directory:
	access to attr=aliasedObjectName
		by * read

(but letting them read them if they preexist).

As far as fixing it... I'll place it appropriately on my very
long TODO list :-).  I'll see if Will, the original author,
is more worrisome.

	Kurt