Comment 2 for bug 1209536

Revision history for this message
Richard Gomes (frgomes) wrote :

At the moment, Mantis and Mediawiki are using cn=proxyagent,cn=jquantlib,cn=org for non-anonymous bind, which is necessary for checking user's password.

Mediawiki, being responsible for creating new accounts, is still using a the powerful admin account. Ideally, we should use another account which has restricted rights, like described in this article:
http://www.openldap.org/lists/openldap-software/200312/msg00351.html

Unfortunately, seems we are still missing something.
I've tried to grant cn=proxyagent the rights described by the aforementioned article but it's not working yet.