Re: (ITS#5690) cn=config cannot be rootdn

[ando@sys-net.it]

Quanah Gibson-Mount wrote:
> --On Tuesday, September 09, 2008 10:10 AM +0000 ando@sys-net.it wrote:
> 
>> quanah@zimbra.com wrote:
>>
>>> In OpenLDAP 2.3, it was possible to set the rootdn of the main database
>>> to be cn=config.  This no longer works in OpenLDAP 2.4, but seems like
>>> it should be valid to me.
>>
>> ...
>>
>>> cn=config is *clearly* under ""
>>
>> No, cn=config is *clearly* under cn=config, which comes earlier than "".
>> But then you don't need to set rootpw.
> 
> Ah, I see.  So this is more just a behavior change between 2.3 and 2.4. 
> Thanks!

Well, I don't think they changed that much.  If you expose cn=config 
then any DN in that namespace will belong to the back-config; if you 
don't expose it, then it will belong to "".  I think you weren't using 
the same slapd.conf with 2.3 and 2.4, if you noticed a different behavior.

p.


Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Fax:     +39 0382 476497
Email:   ando@sys-net.it
-----------------------------------