Re: ppolicy

[Rick Stevens <rps2@socal.rr.com>]

Pierangelo Masarati wrote:
> Rick Stevens wrote:
> >  I'm a bit surprised that neither the slapd parser nor slaptest
> > caught it.  Ah, well.
>
> If you used -d config with slap* from OpenLDAP 2.3, you would have gotten
>
> slapd.conf: line 11: <overlay> extra cruft after <overlay> ignored.
>
> If you used OpenLDAP 2.4, you would have gotten an error
>
> slapd.conf: line 11: <overlay> extra cruft after <overlay>.
> slaptest: bad configuration file!
>
> since 2.4 is much less forgiving about unrecognized statements in 
> slapd.conf.  Strengthening those checks was deferred to 2.4 to avoid 
> changing the traditionally forgiving behavior many people seem to 
> appreciate at mid-life of 2.3.

Ah.  My test box is 2.3.39 (F8).  The two live servers are 2.2.13 (RHEL
4.4) and 2.3.27 (CentOS 5.1).  Soon, all servers will be CentOS 5.1 and
I may install OpenLDAP 2.4.8 on them to replace the 2.3.37 stuff.
----------------------------------------------------------------------
- Rick Stevens, Unix Geek                          rps2@socal.rr.com -
-                                                                    -
-          "Very funny, Scotty. Now beam down my clothes."           -
----------------------------------------------------------------------