RE: (ITS#4096) ppolicy overlay doesn't work when there are subordinate databases

[KevinS@bmrb.co.uk]

Hi Howard,

Sorry for not getting back sooner.

I didn't make my exact setup clear.  All my user accounts are in the
superior database, therefore I have never used the ppolicy overlay on
the subordinate databases.  So when I said it worked in 2.2 what I meant
was it worked against the superior database, in 2.3 it doesn't work at
all.

Overlay order shouldn't be an issue as the only overlay I am using is
ppolicy.


-----Original Message-----
From: Howard Chu [mailto:hyc@symas.com] 
kevins@bmrb.co.uk wrote:
> I also neglected to mention that this was working fine in 2.2.19 with 
> the ppolicy module from cvs hacked in.
In what way did it "work fine" in 2.2? The glue code doesn't intercept
Bind requests, in either 2.2 or 2.3. Nor does it intercept extended
operations. In 2.2 it didn't intercept write operations of any kind.

For 2.3, one would expect that configuring any overlay on the superior
DB should take effect for all the subordinates as well. You may need to
explicitly manage the order of overlay instances to get the desired
effect, as noted in slapd.conf(5). Certainly the 2.3 glue code needs to
be extended to support Binds.

=================================================================

BMRB 
http://www.bmrb.co.uk
_________________________________________________________________
This message (and any attachment) is intended only for the 
recipient and may contain confidential and/or privileged 
material.  If you have received this in error, please contact the 
sender and delete this message immediately.  Disclosure, copying 
or other action taken in respect of this email or in 
reliance on it is prohibited.  BMRB Limited accepts no liability 
in relation to any personal emails, or content of any email which 
does not directly relate to our business.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++