Viewing Software Bugs/6857
Full headers

Major security issue: yes  no

Notes:
Fixed in HEAD fixed in RE24
Notification:

Date: Mon, 07 Mar 2011 15:20:39 +0000
From: rhafer@suse.de
To: openldap-its@OpenLDAP.org
Subject: chain overlay change FLAGS of underlying database

Full_Name: Ralf Haferkamp
Version: RE24, HEAD
OS: 
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (92.252.38.247)


The chain-overlay adds SLAP_DBFLAG_NOLASTMOD to the flags of the database for
which chaining is to be configured. Example:

--------------------
database hdb
suffix o=test
rootdn o=test
rootpw secret
directory /tmp/ldap

overlay chain
chain-return-error TRUE
chain-uri ldap://ldap.server
-------------------

With the above configuration slapd will no longer maintain the
"modifyTimeStamp", "modifiersName", etc. Attributes for write operations to the
"o=test" database anymore.

Note: This bug is only present when using a slapd.conf base configuration.

Fix is almost ready.