Solved: Re: Possible ACL Issue while try to read Root DSE

[Axel Birndt <towerlexa@gmx.de>]

Hi @all & thanks for your help!

Am 29.11.2011 12:28, schrieb Axel Birndt:
> Am 29.11.2011 10:10, schrieb Ondrej Kuznik:
>
> > On 11/29/2011 09:13 AM, Axel Birndt wrote:
> > You should expect a response exactly like this (unless your database
> > suffix is set to ""):
> >
> > ldapsearch -x -D "" -s base -b "" -h localhost
>
> ldapsearch -x -D "" -s base -b "" -h localhost

Now its working for me. I added the following ACL's in

olcDatabase={-1}frontend,cn=config

{0}to dn.base="" by * read
{1}to dn.base="cn=schema,cn=config" by * read
{2}to dn.base="cn=Subschema" by * read

But, does the first rule meaning, that everone could read all in this 
frontend??

Is this security conform? Or it is better to allow only authenticated 
Users to read this?

Are there any best practices for this?

--


Gruß Axel

------------------------------