https://bugs.openldap.org/show_bug.cgi?id=10299

--- Comment #7 from Howard Chu <[email protected]> ---
(In reply to Ondřej Kuzník from comment #5)
> On Thu, Mar 27, 2025 at 03:15:40PM +0000, [email protected] wrote:
> > I don't understand any of your comment at all, but clearly the SEGV is 
> > because
> > you have an ACL that references a group and the group entry couldn't be
> > retrieved from the DB because in dryrun mode none of the DBs are opened. If 
> > you
> > want this slapacl invocation to work, don't use dryrun mode.
> 
> The question is:
> 
> Is there a way to have slapacl avoid the SEGV but return with an actual
> error in this case?

I think SEGV is a pretty definitive error code already.

We could also just print a message when slapacl starts up saying "using dryrun
mode may trigger SEGV if ACL evaluation requires DB access"

-- 
You are receiving this mail because:
You are on the CC list for the issue.

Reply via email to