[Date Prev][Date Next]
Re: ACLs broken by ITS#5419
> Full_Name: Rein Tollevik
> Version: CVS head
> OS: linux, solaris
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (188.8.131.52)
> The change to servers/slapd/backend.c for ITS#5416 seem to have broken the
> ability for group and set statements in access control lines to refer to entries
> outside the backend currently being operated on.
That ability was never intended in the first place. Historically, backends in
slapd have been treated as isolated DSAs with no connection to each other.
They've required special mechanisms (like back-relay or slapo-glue) to be joined.
-- Howard Chu
Chief Architect, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/