Re: SASL EXTERNAL olcRootDN and ACLs

To: Quanah Gibson-Mount <quanah@symas.com>, openldap-technical@openldap.org
Subject: Re: SASL EXTERNAL olcRootDN and ACLs
From: linux nuse <nuse.linux@yandex.com>
Date: Fri, 28 Sep 2018 02:48:15 +0300
Authentication-results: smtp3p.mail.yandex.net; dkim=pass header.i=@yandex.com
Content-language: en-US
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail; t=1538092097; bh=8dhhfLe0I+viCOaRCwUOIR69DUYUeUkmY2Kb1ROjEy0=; h=Subject:To:References:From:Message-ID:Date:In-Reply-To; b=fQGpeiksjX/xH7KowmryGyfn1CrmrA+QjeAvhAQkzFXwrjsSWLYO+6cgyPt1sJEMy wiTzbDQKApvNwhW7mMNgOFMckRAEUbWoLmwx31Zu9OGJKgei9KhJCayeiVuVn+ONUm Mx/Sgq8ZEIlLcX2Cv3nASx0AfOTo9d0ZTB7egCtU=
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail; t=1538092095; bh=8dhhfLe0I+viCOaRCwUOIR69DUYUeUkmY2Kb1ROjEy0=; h=Subject:To:References:From:Message-ID:Date:In-Reply-To; b=UfG+90AQ/EO3pGon4+mATWxo3ihAlbSNRhc8fr2zAarzW5u1E7moJjLjeXGydd0Y/ XBTJgBBc/jKGUkofAyiG2ZOxy6rpsU2FxZd1s0YC4fhyAP+/LM0dWsl6EbNCIHNuqr bGz3msIbvt91jn+QlQjWz4Hywqevb5Bp7G1kOD7c=
In-reply-to: <94FADF5EF98A99CF6C45FE04@[192.168.1.39]>
References: <07da0f39-9fac-6aa2-2a5b-d43513a72149@yandex.com> <94FADF5EF98A99CF6C45FE04@[192.168.1.39]>

On 28/09/18 02:34, Quanah Gibson-Mount wrote:

--On Thursday, September 27, 2018 2:41 AM +0300 linux nuse <nuse.linux@yandex.com> wrote:

"Well", said I and set olcRootDN to
gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth.




Added it as a rootdn for which database? (cn=config, your data db, etc)


Hmm... cn=config.
I've though that rootdn is global.

References:
- SASL EXTERNAL olcRootDN and ACLs
  - From: linux nuse <nuse.linux@yandex.com>
- Re: SASL EXTERNAL olcRootDN and ACLs
  - From: Quanah Gibson-Mount <quanah@symas.com>