Igor Shmukler <[email protected]> writes: > I want it to be something like: > olcAccess: {1}to * by dn="cn=config" manage > > Basically, I want dn=cn=config to have full root access over > everything. I also want this password ideally to be password > protected. > > Does it make sense? Can it be done?
Sure. Add this olcAccess attribute to all the databases. Or to the frontend database, but check man slapd.access for the priorities and defaults. For what it's worth, I use the syntax to * by dn.exact=cn=config (which should be equivalent to yours). -- Feri.
