[Date Prev][Date Next]
Re: Creating database, catch-22
Pierangelo Masarati writes:
>Peter Mogensen wrote:
>> PS: As you can probably see, all access goes through SASL EXTERNAL. UNIX
>> root maps to cn=config via ldapi:///,
...plus authz-regexp, I assume
> remote access uses x509 certificates.
> Add an ACL (either global, if there aren't any in that database, or
> local) that allows the identity you trust to write to that database.
Or (temporarily?) change rootdn for the HDB database to cn=config,
so root won't need a password for that rootdn over ldapi://. Or use
authz-regexp to map your SASL/EXTERNAL identity to the database's
rootdn instead of to cn=config.