Re: Advertising configcontext in Root-DSE

[Ralf Haferkamp <rhafer@suse.de>]

On Thursday 16 February 2006 19:00, Howard Chu wrote:
> Ralf Haferkamp wrote:
> > On Thursday 16 February 2006 16:41, Pierangelo Masarati wrote:
> >>> Ralf Haferkamp wrote:
> >>>> Hi,
> >>>>
> >>>> I just recognized that current slapd advertises the
> >>>> config-context in root-dse, even if back-config is not used
> >>>> (e.g. no config directory exists). To me it seems useful to hide
> >>>> the
> >>>> "configContext" Attribute in such cases and deny searches below
> >>>> cn=config with "no such object".
> >>>
> >>> No. The cn=config tree is always present; just that any changes
> >>> made when no backing directory exists will not persist.
> >>
> >> but if no "database config" directive is present, it's not
> >> accessible.  I think this is what Ralf meant.
> >
> > Yes. It's just confusing that you see "configContext" in the
> > Root-DSE but can't access it in any way.
>
> I don't consider this a condition worth testing for. You could have a
> sasl-regexp that maps some other identity to the cn=config DN.
Hm, correct. I totally forgot about that. With that in mind my orginal 
suggestion seems indeed a bit useless ;).

> (And I don't consider that worth explicitly testing for either...)
> Feel free to code it up if you feel strongly about it.

-- 
Ralf