Re: (ITS#6000) slapadd allows to add entry with empty DN

[hyc@symas.com]

ando@sys-net.it wrote:
> Full_Name: Pierangelo Masarati
> Version: HEAD/re24
> OS: irrelevant
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (81.72.89.40)
> Submitted by: ando
>
>
> When slapd is configured to host a database with empty suffix (""), an entry
> with empty DN can be slapadd'ed, but not ldapadd'ed.  I believe the latter
> behavior is appropriate, while the former should be denied.

No, you need to be able to slapadd the context entry, in particular to restore 
a contextCSN.

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/