[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Directory Manager (cn=config) ACLs

To: openldap-technical@openldap.org
Subject: Re: Directory Manager (cn=config) ACLs
From: Buchan Milne <bgmilne@staff.telkomsa.net>
Date: Thu, 2 Feb 2012 18:09:24 +0200
Cc: Andy Carlson <andy.carlson@moody.edu>
In-reply-to: <26FDD93CC031E0449541186B7C8F43060227CCF173@exchmbx01.moody.edu>
References: <26FDD93CC031E0449541186B7C8F43060227CCF173@exchmbx01.moody.edu>
User-agent: KMail/1.13.7 (Linux/2.6.38.8-desktop-9.mga; KDE/4.6.5; x86_64; ; )

On Wednesday, 1 February 2012 21:52:56 Andy Carlson wrote:
> Are there any ACLs that control what cn=directory manager,cn=config can
> modify or is it a LDAP superuser sort-of account?  I only ask because I
> want to blow away my ACLs (olcAccess attributes in olcDatabase={2}bdb) and
> re-add updated ones them (I know it sounds silly, but I have valid reasons
> for doing this) and I want to make sure that I can still make these
> modifications as this directory manager even if I have no ACLs.  Thanks,

The DN that is rootdn of cn=config, will always be able to modify everything 
under cn=config, regardless of ACLs.

Regards,
Buchan

References:
- Directory Manager (cn=config) ACLs
  - From: Andy Carlson <andy.carlson@moody.edu>

Prev by Date: Re: Got error while enabling SASL
Next by Date: Re: Got error while enabling SASL
Index(es):
- Chronological
- Thread