[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Catch-22: Need to change olcRootDN

To: openldap-technical@openldap.org
Subject: Re: Catch-22: Need to change olcRootDN
From: Prentice Bisbal <pbisbal@pppl.gov>
Date: Thu, 29 Jun 2017 18:27:10 -0400
Content-language: en-US
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pppl-gov.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding:content-language; bh=9hTSWKgMe25fp5JZ6QMP8xEeGhJZPQHTnfxlb/V7sPM=; b=svxGJSXJ0zsUctHb9zmR+06DrpZR34eTokVv7YYZ4DwWp2ZffAZT2pOYEzMs5Ce6gB x71aD9f4zBFVSMwr2D2LLRiDBtKDMYEUj8vDQ9VPuLSVJLbPK6wnE+7oU9T+yPWliMlo m5C0Uh25/G+aoUjvyIavpuDjQ2nVB2leCT1LCT6Ra8EdUgZDu+fau7MyjAS6lzUY93Io 1EavMxIvCxqSzSv3iPJTBZFCwHRhlpUg9DXiSQBswj/MD/Zjzk/zV6GAdHtW1nXAVVeK ZZ4V3SPFGOIG6uFXGr4sEw6w29q2rLYLofxnnXmmG5K/NkSgyXa2EebwbcRxot+Hf4k0 YdCw==
In-reply-to: <234BC379C457A78F239D84B9@[192.168.1.30]>
References: <f6f1fc87-ecb9-b79b-9f75-605af1b965fd@pppl.gov> <56aa7be8-fddb-19d5-d1ed-ed980eaed814@pppl.gov> <WM!1fb6aebafd4bdd26b5e986e44a40a175fb1e38660a9c7c31b257bd5698ac8ebd4f01bd5b74b0b1c87b849de1c0f3e44b!@mailstronghold-1.zmailcloud.com> <234BC379C457A78F239D84B9@[192.168.1.30]>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.0

Thanks. One more related question: are special rules needed for theconfig information, like an ACL just for cn=config so the ldapadmins canmake changes w/o needing a rootDN?



On 06/29/2017 06:11 PM, Quanah Gibson-Mount wrote:

--On Thursday, June 29, 2017 7:08 PM -0400 Prentice Bisbal<pbisbal@pppl.gov> wrote:

Actually, let me expand that question. I need to make changes to
everything in cn=config after switching to dynamic configuration. Is it
possible to do that without starting from scratch with a new slapd.conf
file. I deleted the slapd.conf I was working with because I didn't need
it anymore, and I was afraid a coworker not familiar with the dynamic
config would try to make changes to slapd.conf, and expect them to work.


Use slapcat to export it.  Use slapadd to import.

--Quanah

--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>

References:
- Catch-22: Need to change olcRootDN
  - From: Prentice Bisbal <pbisbal@pppl.gov>
- Re: Catch-22: Need to change olcRootDN
  - From: Prentice Bisbal <pbisbal@pppl.gov>
- Re: Catch-22: Need to change olcRootDN
  - From: Quanah Gibson-Mount <quanah@symas.com>

Prev by Date: Re: Catch-22: Need to change olcRootDN
Next by Date: Re: [Q] can I replicate several branches to the same slave from one master?
Index(es):
- Chronological
- Thread