Re: 2.4.6 ACLs and Extented Operations

["Gavin Henry" <ghenry@OpenLDAP.org>]

<quote who="Howard Chu">
> Gavin Henry wrote:
>> Now, when we browse our Samba PDC that worked fine on 2.3.39, we are
>> seeing:
>>
>> conn=63 fd=32 ACCEPT from IP=X.X.X.X:39211 (IP=0.0.0.0:389)
>> conn=63 op=0 EXT oid=1.3.6.1.4.1.1466.20037
>> conn=63 op=0 do_extended: unsupported operation "1.3.6.1.4.1.1466.20037"
>> conn=63 op=0 RESULT tag=120 err=2 text=unsupported extended operation
>>
>> and it goes very slowly.
>>
>> Any ideas?
>
> That's a StartTLS request. slapd will reject that request if you didn't
> configure TLS certificates. Check your client config to see why it's
> requesting it, or your server config...

Aye, realised this now after using my head.

Our Samba conf has start_tls in it. What an idiot ;-)

No problem with 2.4.6 here, just brain dead users ;-)