[Date Prev][Date Next]
RE: (ITS#4096) ppolicy overlay doesn't work when there are subordinate databases
Sorry for not getting back sooner.
I didn't make my exact setup clear. All my user accounts are in the
superior database, therefore I have never used the ppolicy overlay on
the subordinate databases. So when I said it worked in 2.2 what I meant
was it worked against the superior database, in 2.3 it doesn't work at
Overlay order shouldn't be an issue as the only overlay I am using is
From: Howard Chu [mailto:firstname.lastname@example.org]
> I also neglected to mention that this was working fine in 2.2.19 with
> the ppolicy module from cvs hacked in.
In what way did it "work fine" in 2.2? The glue code doesn't intercept
Bind requests, in either 2.2 or 2.3. Nor does it intercept extended
operations. In 2.2 it didn't intercept write operations of any kind.
For 2.3, one would expect that configuring any overlay on the superior
DB should take effect for all the subordinates as well. You may need to
explicitly manage the order of overlay instances to get the desired
effect, as noted in slapd.conf(5). Certainly the 2.3 glue code needs to
be extended to support Binds.
This message (and any attachment) is intended only for the
recipient and may contain confidential and/or privileged
material. If you have received this in error, please contact the
sender and delete this message immediately. Disclosure, copying
or other action taken in respect of this email or in
reliance on it is prohibited. BMRB Limited accepts no liability
in relation to any personal emails, or content of any email which
does not directly relate to our business.