Re: Access control: the "manage" privilege

[Michael Ströder <michael@stroeder.com>]

Dieter Kluenter wrote:
> Vladimir Dzhuvinov <vd@valan.net> writes:
>
> > The admin guide mentions a "manage" privilege, but doesn't detail its
> > purpose. It is listed as the top-level privilege, but what extra
> > rights does it give over "write"?
>
> relax, formerly known as manageDSAiT, primarily required to manage
> dynamic directory service, man slapo-dds(5) and RFC-2589.

The "manage DSA IT" control is different from "manage DIT" control (now 
relax rules control). The first is mainly for maintaining referral 
entries whereas for the latter see draft-zeilenga-ldap-relax-00.txt.

Ciao, Michael.