[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: R: Re: R: Enforcing attribute ACL on add operations

To: ando@sys-net.it (Pierangelo Masarati)
Subject: Re: R: Re: R: Enforcing attribute ACL on add operations
From: manu@netbsd.org (Emmanuel Dreyfus)
Date: Sun, 28 Sep 2008 07:16:29 +0200
Cc: openldap-devel@openldap.org
In-reply-to: <13237118.48681222545311844.JavaMail.root@mail2.sys-net.it>
User-agent: MacSOUP/2.7 (unregistered for 617 days)

Pierangelo Masarati <ando@sys-net.it> wrote:

> I'm not necessarily saying that.  For the problem you highlight, setting
> authz-policy from
> would cure it 

Unfortuately, authz-policy to seems to be mandatory if you want to
configure slapo-chain: in that scenario, the replica connects to the
master as a pseudo-user that must have authTo: * if you want it to
perform update on behalf of the user that did the modification.

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@netbsd.org

References:
- R: Re: R: Enforcing attribute ACL on add operations
  - From: Pierangelo Masarati <ando@sys-net.it>

Prev by Date: Re: R: Re: R: Enforcing attribute ACL on add operations
Next by Date: Re: R: Re: R: Enforcing attribute ACL on add operations
Index(es):
- Chronological
- Thread