[Date Prev][Date Next]
Re: Access control: the "manage" privilege
Dieter Kluenter wrote:
Vladimir Dzhuvinov <email@example.com> writes:
The admin guide mentions a "manage" privilege, but doesn't detail its
purpose. It is listed as the top-level privilege, but what extra
rights does it give over "write"?
relax, formerly known as manageDSAiT, primarily required to manage
dynamic directory service, man slapo-dds(5) and RFC-2589.
The "manage DSA IT" control is different from "manage DIT" control (now
relax rules control). The first is mainly for maintaining referral
entries whereas for the latter see draft-zeilenga-ldap-relax-00.txt.