[Pkg-openldap-devel] [openldap] 03/05: don't explicitly grant rights to rootdn

Ryan Tandy rtandy-guest at moszumanska.debian.org
Mon Oct 20 17:33:56 UTC 2014


This is an automated email from the git hooks/post-receive script.

rtandy-guest pushed a commit to branch master
in repository openldap.

commit ecf22177b353c69320579a70bbd29168b7f62018
Author: Ryan Tandy <ryan at nardis.ca>
Date:   Sun Oct 19 18:15:51 2014 -0700

    don't explicitly grant rights to rootdn
---
 debian/changelog       | 2 ++
 debian/slapd.init.ldif | 2 --
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 6c5adcf..a93345e 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,8 @@ openldap (2.4.40-2) UNRELEASED; urgency=medium
   * Fix typo (chmod/chgrp) in previous changelog, spotted by Ferenc Wagner.
   * debian/patches/contrib-modules-use-dpkg-buildflags: Also use CPPFLAGS from
     dpkg-buildflags. Spotted by Lintian.
+  * debian/slapd.init.ldif: Don't bother explicitly granting rights to the
+    rootdn, since it already has unlimited privileges. Thanks Ferenc Wagner.
 
  -- Ryan Tandy <ryan at nardis.ca>  Sun, 19 Oct 2014 17:34:00 -0700
 
diff --git a/debian/slapd.init.ldif b/debian/slapd.init.ldif
index b7c91cd..2d04c5b 100644
--- a/debian/slapd.init.ldif
+++ b/debian/slapd.init.ldif
@@ -75,10 +75,8 @@ olcDbIndex: member,memberUid eq
 olcAccess: to attrs=userPassword,shadowLastChange
   by self write
   by anonymous auth
-  by dn="cn=admin, at SUFFIX@" write
   by * none
 olcAccess: to dn.base="" by * read
 olcAccess: to *
-  by dn="cn=admin, at SUFFIX@" write
   by * read
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-openldap/openldap.git



More information about the Pkg-openldap-devel mailing list