dn.subtree="" does not work in acl´s (ITS#2707)

[leifj@it.su.se]

Full_Name: Leif Johansson
Version: 2.1.22
OS: Linux
URL: 
Submission from: (NULL) (217.215.166.49)



I sort of believe this to be a major security problem but I will not argue with
anyone who wishes to disagree ;-)

The following acl does not work:

access to dn.subtree="" by
   ...

whereas the following does work:

access to dn.subtree="dc=org" by
   ...

I need to make slapd.conf configuration changes whenever I add another
container
to my root context which is bad.