[Date Prev][Date Next]
Re: (ITS#4096) ppolicy overlay doesn't work when there are subordinate databases
> I also neglected to mention that this was working fine in 2.2.19 with
> the ppolicy module from cvs hacked in.
In what way did it "work fine" in 2.2? The glue code doesn't intercept
Bind requests, in either 2.2 or 2.3. Nor does it intercept extended
operations. In 2.2 it didn't intercept write operations of any kind.
For 2.3, one would expect that configuring any overlay on the superior
DB should take effect for all the subordinates as well. You may need to
explicitly manage the order of overlay instances to get the desired
effect, as noted in slapd.conf(5). Certainly the 2.3 glue code needs to
be extended to support Binds.
-- Howard Chu
Chief Architect, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc
OpenLDAP Core Team http://www.openldap.org/project/