[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#4035) rootdn incorrect in cn=config backend/database



Full_Name: Andreas Hasenack
Version: OPENLDAP_REL_ENG_2_3
OS: linux 2.6
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (200.140.247.99)


I can't write to cn=config even when authenticated as the rootdn for that
backend. 

slapd -d 128 shows:
slapd starting
=> access_allowed: search access to "olcDatabase={1}bdb,cn=config" "objectClass"
requested
<= root access granted
(...)
=> access_allowed: read access to "olcDatabase={1}bdb,cn=config" "olcDbShmKey"
requested
<= root access granted
=> access_allowed: backend default write access denied to
"uid=andreas,cn=digest-md5,cn=auth"

I put a breakpoint in be_isroot() and this is what I get:
(gdb) p op->o_bd->be_rootdn
$5 = {bv_len = 9, bv_val = 0x81bf700 "cn=config"}

slapd.conf has:
(...)
database config
rootdn "uid=andreas,cn=digest-md5,cn=auth"

database        bdb
suffix          "o=company,c=br"
rootdn          "cn=Manager,o=company,c=br"
rootpw          password
(...)

All my ACL directives are under the "database bdb" definition and have
"dn.subtree="o=company,c=br"".