Re: (ITS#4162) man 5 slapd.conf / defaultsearchbase

[ando@sys-net.it]

> Full_Name: Michael Ströder
> Version: HEAD
> OS: SuSE Linux 10.0
> URL:
> Submission from: (NULL) (83.124.19.230)
>
>
> HI!
>
> Fortunately

this is deliberate rather than fortunate.  The manual already indicates
that the "defaultsearchbase" is only used for non-base scope searches,
while the rootDSE requires the base scope.

The fact that base scope searches for the empty DN return the rootDSE is
subjected to access checking, so the message you're suggesting sounds a
bit too optimistic (or simplistic).

p.

> a base-level search with empty search root seems to return the
> rootDSE even if defaultsearchbase is set in slapd.conf. I'd like to
> propose that
> the text in man 5 slapd.conf reflects that. See text below.
>
> defaultsearchbase <dn>
>    Specify a default search base to use when client submits a non-base
>    search request with an empty base DN. This does not affect search
>    requests with base scope which always will return the rootDSE.
>
> Ciao, Michael.
>
>
>


-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it



Ing. Pierangelo Masarati
Responsabile Open Solution

SysNet s.n.c.
Via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
------------------------------------------
Office:   +39.02.23998309          
Mobile:   +39.333.4963172
Email:    pierangelo.masarati@sys-net.it
------------------------------------------