[Pkg-openldap-devel] Bug#761407: Bug#761407: slapd: changes of cn=config become effective only after restarting slapd

[Dietrich Clauss]

Hi Ryan,

Ryan Tandy schrieb:
> Thanks for the report. This is ITS#6035 upstream. In that report the
> developer wrote:
> 
> >This is a known limitation in authz regexp support. There are no
> >plans to change this any time soon.

Please, add a big fat warning in slapd-config(5).

Especially because online changes of most (all?) other config attributes
work fine, it is difficult to guess that in case of AuthzRegexp the
things are different.  I don't think that the limitation per se is
problematic, but it should be documented somewhere.

> Concerning attributes other than olcAuthzRegexp, in my tests on
> wheezy olcAccess changes did take effect immediately. Can you
> double-check that or provide a test case demonstrating it?

Confirmed.  Changes of olcAccess work fine here, too.

Best regards,
- Dietrich
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-openldap-devel/attachments/20140916/5e024b4b/attachment.sig>