Re: commit: ldap/doc/man/man5 slapd-meta.5

[Pierangelo Masarati <ando@sys-net.it>]

Gavin Henry wrote:
> Pierangelo Masarati wrote:
> > ando@OpenLDAP.org wrote:
> >
> > > Log Message:
> > > make pseudoroot-bind-defer TRUE by default (part of ITS#5440 fix)
> >
> > This is a change in a side-feature of back-meta, something that should 
> > not hurt in most cases, but definitely a change in the default 
> > behavior, established since back-meta was released.  What's the best 
> > way to notify it?
>
> I'm being dumb, but notify what?

Probably I was not clear enough.  I changed the default behavior of a 
parameter, so now if it's not specified in slapd.conf (no back-config 
yet :) users may get unexpected changes in the behavior of back-meta. 
The change should not be critical, since the original behavior was sort 
of dumb, but one aspect is that it was related to authentication, and 
the change could result in a deferred discovery that what the 
administrative credentials used by the backend are no longer valid, i.e. 
a bind as the pseudorootdn would succeed but a subsequent operation 
could fail.  Also, the response textual message and the logging might 
not clearly indicate the cause of the error, I need to check it.

p.



Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
---------------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Email:   pierangelo.masarati@sys-net.it
---------------------------------------