Re: [Heimdal PATCH] LDAP backend support for OpenLDAP 2.1.x

[Alberto Patino <jalbertop@aranea.com.mx>]

On Mon, 2003-05-26 at 18:21, Luke Howard wrote:
> 
> >Well, you do need to patch the hdb-ldap.c file because it has a new call
> >to do a EXTERNAL SASL mechanism to use the local IPC LDAPI interfase
> >between the kadmin tool and the slapd backend. (The old OpenLDAP release
> >2.0.x didn't required any bind mechanism to access the LDAP server). It
>                                              ^^^^^^
> 
> Actually, 2.1.x supports anonymous reads, but not anonymous writes (as
> did 2.0.x).
Yes that's much more precise!

> 
> You will also want a SASL regexp to map to the root DN (or some other
> user with appropriate permissions):
> 
> For example:
> 
> sasl-regexp uidNumber=0\\\+gidNumber=0,cn=peercred,cn=external,cn=auth "cn=Directory Manager,dc=sics,dc=se"
> 
Oops I dont have this mapping in my slapd file but I do have this:

slapd.conf:

access to dn.base="ou=development,o=test,dc=com,dc=mx"
	by sockurl.exact=ldapi:/// write
        by dn="uid=albertop*" write
	 by * read

access to *
	by sockurl.exact=ldapi:/// write
	 by dn="uid=albertop*" write
	 by * read


-- albertop