[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Access control: the "manage" privilege

Dieter Kluenter wrote:
Vladimir Dzhuvinov <vd@valan.net> writes:

The admin guide mentions a "manage" privilege, but doesn't detail its
purpose. It is listed as the top-level privilege, but what extra
rights does it give over "write"?

relax, formerly known as manageDSAiT, primarily required to manage dynamic directory service, man slapo-dds(5) and RFC-2589.

The "manage DSA IT" control is different from "manage DIT" control (now relax rules control). The first is mainly for maintaining referral entries whereas for the latter see draft-zeilenga-ldap-relax-00.txt.

Ciao, Michael.