[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: what is wrong with my permissions?

Igor Shmukler <igor.shmukler@gmail.com> writes:

> I want it to be something like:
> olcAccess: {1}to * by dn="cn=config" manage
> Basically, I want dn=cn=config to have full root access over
> everything. I also want this password ideally to be password
> protected.
> Does it make sense? Can it be done?

Sure.  Add this olcAccess attribute to all the databases.  Or to the
frontend database, but check man slapd.access for the priorities and
defaults.  For what it's worth, I use the syntax

to * by dn.exact=cn=config

(which should be equivalent to yours).