Ubuntu
openldap package

  1. Bug #427842
  2. Comment #0

Comment 0 for bug 427842

Revision history for this message
Andreas Hasenack (ahasenack) wrote : [karmic] frontend DB needs ACLs for base="" and cn=schema

The current installation of slapd doesn't allow for searches in the empty base (dn="") and the schema entries. These are needed by several client tools to, among other things:
- check what the server schema is (luma, apache directory studio)
- discover what the server supports (the -s base -b "" + search), like authentication mechanisms, extensions, etc

This ldapmodify fixes it after the server is running, so it should give you hints on where to add it properly in the package:

dn: olcDatabase={-1}frontend,cn=config
changetype: modify
add: olcAccess
olcAccess: to dn.base="" by * read
olcAccess: to dn.base="cn=schema" by * read