[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#6000) slapadd allows to add entry with empty DN

ando@sys-net.it wrote:
> Full_Name: Pierangelo Masarati
> Version: HEAD/re24
> OS: irrelevant
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (
> Submitted by: ando
> When slapd is configured to host a database with empty suffix (""), an entry
> with empty DN can be slapadd'ed, but not ldapadd'ed.  I believe the latter
> behavior is appropriate, while the former should be denied.

No, you need to be able to slapadd the context entry, in particular to restore 
a contextCSN.

   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/