[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Advertising configcontext in Root-DSE

Ralf Haferkamp wrote:

I just recognized that current slapd advertises the config-context in root-dse, even if back-config is not used (e.g. no config directory exists). To me it seems useful to hide the "configContext" Attribute in such cases and deny searches below cn=config with "no such object".

No. The cn=config tree is always present; just that any changes made when no backing directory exists will not persist.

 -- Howard Chu
 Chief Architect, Symas Corp.  http://www.symas.com
 Director, Highland Sun        http://highlandsun.com/hyc
 OpenLDAP Core Team            http://www.openldap.org/project/