> Quoting "Pierangelo Masarati" <ando@sys-net.it>: > >> I believe ACIs have never been tested after adding ACL caching... >> Can you provide a significant portion of your LDIF and your >> slapd.conf, so that I can test it? > > The included tar ball contains my slapd.conf, the ACL file and > a LDIF dump. It's naturally not even CLOSE to my exact usage, but > it will show the problem non the less... > > The password for the 'uid=turbo,ou=People,o=Swe.Net AB,c=SE' is > 'turbo'. The problem is there in both GSSAPI and SIMPLE binds... I have committed a quick fix to HEAD for this problem; essentially, I disabled ACL caching for ACIs. Please report if it works for you. In 2.2, all you need to do is comment out the two occurrences of ACL_RECORD_VALUE_STATE within ACI related code in servers/slapd/acl.c (see attached patch). Please report if it works by means of the ITS. p. -- Pierangelo Masarati mailto:pierangelo.masarati@sys-net.it SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497
Attachment:
slapd-2.2-aci.patch
Description: Binary data