[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Advertising configcontext in Root-DSE

To: Ralf Haferkamp <rhafer@suse.de>
Subject: Re: Advertising configcontext in Root-DSE
From: Howard Chu <hyc@symas.com>
Date: Thu, 16 Feb 2006 07:26:03 -0800
Cc: openldap-devel@OpenLDAP.org
In-reply-to: <200602161137.38789.rhafer@suse.de>
References: <200602161137.38789.rhafer@suse.de>
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060215 SeaMonkey/1.5a Mnenhy/0.7.3.0

Ralf Haferkamp wrote:

Hi,
I just recognized that current slapd advertises the config-context in root-dse, even if back-config is not used (e.g. no config directory exists). To me it seems useful to hide the "configContext" Attribute in such cases and deny searches below cn=config with "no such object".

No. The cn=config tree is always present; just that any changes made when no backing directory exists will not persist.

--
 -- Howard Chu
 Chief Architect, Symas Corp.  http://www.symas.com
 Director, Highland Sun        http://highlandsun.com/hyc
 OpenLDAP Core Team            http://www.openldap.org/project/

Follow-Ups:
- Re: Advertising configcontext in Root-DSE
  - From: "Pierangelo Masarati" <ando@sys-net.it>

References:
- Advertising configcontext in Root-DSE
  - From: Ralf Haferkamp <rhafer@suse.de>

Prev by Date: Advertising configcontext in Root-DSE
Next by Date: Re: Advertising configcontext in Root-DSE
Index(es):
- Chronological
- Thread