Re: Q: turning directory into read-only mode wo shutdown?

["Pierangelo Masarati" <ando@sys-net.it>]

Yes (experimental, 2.3 only): allow write access to the database's entry
in back-monitor, "cn=Database [0-9]+,cn=Databases,cn=Monitor" as
appropriate, and change the value of the "readOnly" attribute.  For
instance, in the testsuite add

database        monitor
access to dn.onelevel="cn=Databases,cn=Monitor" attrs=readOnly
        by dn.exact="cn=Manager,dc=example,dc=com" write
        by * read
access to *
        by * read

This allows wrote access to that attribute by an identity definedin
inother database; or use the "rootdn"/"rootpw" of the monitor database
itself.

p.


> Hi!
>
> I am looking for a way to backup slapd database files. During this time I
> want
> slapd to be readonly. Is there a simpler way than restarting slapd with
> another (readonly) configuration, e.g. SIGHUP?
> Any other ways to do a backup on the fly?
>
> - --
> Heiko Nardmann (Dipl.-Ing. Technische Informatik)
> secunet Security Networks AG - Sicherheit in Netzwerken (www.secunet.de),
> Weidenauer Str. 223-225, D-57076 Siegen
> Tel. : +49 271 48950-13, Fax  : +49 271 48950-50
>
> Besuchen Sie uns vom 10. - 16. März auf der CeBIT 2005 in Halle 7, Stand
> D38.
>
> Informationen zu unseren CeBIT-Themen finden Sie unter www.secunet.com
> <outbind://44/www.secunet.com>  - wir freuen uns auf das Gespräch mit
> Ihnen.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.6 (GNU/Linux)
>
> iD8DBQFCB0SWpm53PRScYygRAieaAKDqB0Dd/tBOqRoUqLa5TObR8TwjqQCgzrBp
> UaFBtdipjJ8HxeegMya2JSY=
> =Qpoc
> -----END PGP SIGNATURE-----
>


-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497