Expecting the answer 'upgrade' again, but thought I'd mention it:

We have a slightly odd schema, where basically cn=<USER>,ou=users,dn=foo has children,
cn=<THING>,cn=<USER>,ou=users,dn=foo

and a set of attr permissions, of which the key one is that cn=<USER>,ou=users,dn=foo can read/write to any children of it.

THIS works when bound as cn=a:

Oct 5 16:59:20 dev slapd[12626]: conn=7 op=17 ADD dn="cn=fullname,cn=a,ou=users,dc=foo" Oct 5 16:59:20 dev slapd[12626]: conn=7 op=17 RESULT tag=105 err=0 text=

THIS fails when bound as cn=a(b)

Oct 5 17:09:08 dev slapd[12626]: conn=9 op=6 ADD dn="cn=fulltext,cn=a (b),ou=users,dc=foo" Oct 5 17:09:08 dev slapd[12626]: conn=9 op=6 RESULT tag=105 err=50 text=no write access to entry

Reasonably exhaustive testing seems to suggest it's the brackets. Any thoughts?

Reply via email to