Thursday·02·March·2006
OpenLDAP sucks! //at 01:58 //by abe
from the lacks-documentation-and-performance dept.
Not only that in an access_ctrl of
OpenLDAP up to version 2.1 access to dn=bla really means
access to dn.regex=bla and therefore matches also all
children of an LDAP entry (for luck they fixed this in 2.2), but
already being in rage the following nearly made me bite into the edge
of my desk:
/etc/openldap/access_ctrl: line 7: unknown dn style "exact" in to clause <access clause> ::= access to <what> [ by <who> <access> [ <control> ] ]+ <what> ::= * | [dn[.<dnstyle>]=<regex>] [filter=<ldapfilter>] [attrs=<attrlist>] [...] <dnstyle> ::= regex | base | exact (alias of base) | one | subtree | children
Also the man page mentions exact as DN style:
For all other qualifiers, the pattern is a string repre sentation of the entry's DN. base or exact (an alias of base) indicates the entry whose DN is equal to the pat tern.
Yet another day I could throw OpenLDAP into the trash can!
Filed under:
Blogging is futile » English » Computer »
OpenLDAP sucks!
Tagged as: LDAP, Rant
0 comments // show without comments // write a comment //
Tagged as: LDAP, Rant
0 comments // show without comments // write a comment //
