Authentication for on the fly configuration updates in OpenLDAP 2.4

2011-01-28 Thread Razvan Deaconescu
Hi! I've browsed the configuration page for slapd[1] and it mentions that, for starting from version 2.3, The LDAP configuration engine allows all of slapd's configuration options to be changed on the fly, generally without requiring a server restart for the changes to take effect. What is the

Re: Authentication for on the fly configuration updates in OpenLDAP 2.4

2011-01-28 Thread Pierangelo Masarati
Razvan Deaconescu wrote: Hi! I've browsed the configuration page for slapd[1] and it mentions that, for starting from version 2.3, The LDAP configuration engine allows all of slapd's configuration options to be changed on the fly, generally without requiring a server restart for the changes to

Re: Authentication for on the fly configuration updates in OpenLDAP 2.4

2011-01-28 Thread Dan White
On 28/01/11 16:54 +0200, Razvan Deaconescu wrote: Hi! I've browsed the configuration page for slapd[1] and it mentions that, for starting from version 2.3, The LDAP configuration engine allows all of slapd's configuration options to be changed on the fly, generally without requiring a server

Re: Authentication for on the fly configuration updates in OpenLDAP 2.4

2011-01-28 Thread Pierangelo Masarati
Dan White wrote: On 28/01/11 16:54 +0200, Razvan Deaconescu wrote: Hi! I've browsed the configuration page for slapd[1] and it mentions that, for starting from version 2.3, The LDAP configuration engine allows all of slapd's configuration options to be changed on the fly, generally without

Re: Authentication for on the fly configuration updates in OpenLDAP 2.4

2011-01-28 Thread Dan White
On 28/01/11 16:34 +0100, Pierangelo Masarati wrote: You can't set the rootpw for a rootdn outside the naming context of a database. Either set Ok, I'm finally starting to get a grasp on cn=config. If I understand correctly, there will always be a rootdn for cn=config, regardless if one one

Re: Authentication for on the fly configuration updates in OpenLDAP 2.4

2011-01-28 Thread Razvan Deaconescu
On 01/28/2011 05:24 PM, Dan White wrote: On 28/01/11 16:54 +0200, Razvan Deaconescu wrote: Hi! I've browsed the configuration page for slapd[1] and it mentions that, for starting from version 2.3, The LDAP configuration engine allows all of slapd's configuration options to be changed on the

Re: Authentication for on the fly configuration updates in OpenLDAP 2.4

2011-01-28 Thread Dan White
On 28/01/11 19:10 +0200, Razvan Deaconescu wrote: # slapcat -n0 | grep -C 5 '^\(olcRootDN\|olcRootPW\)' olcAccess: {0}to * by * none olcAddContentAcl: TRUE olcLastMod: TRUE olcMaxDerefDepth: 15 olcReadOnly: FALSE olcRootDN: cn=config olcSyncUseSubentry: FALSE olcMonitoring: FALSE

Re: Authentication for on the fly configuration updates in OpenLDAP 2.4

2011-01-28 Thread Howard Chu
Dan White wrote: I have discovered this myself, and I personally just rebuild from my own slapd.conf. I just took a look at the debian/slapd.conf template file in squeeze, which presumably is what the package installation uses to ultimately generate the slapd.d config backend. I've copied it

Re: Authentication for on the fly configuration updates in OpenLDAP 2.4

2011-01-28 Thread Dan White
On 28/01/11 12:06 -0800, Howard Chu wrote: Dan White wrote: This config is missing two pretty important items in my opinion: authz-regexp gidNumber=0\\\+uidNumber=0,cn=peercred,cn=external,cn=auth cn=admin,@SUFFIX@ and databaseconfig rootdn cn=admin,@SUFFIX@ Your