mirror of
https://git.openldap.org/openldap/openldap.git
synced 2025-01-06 10:46:21 +08:00
make pseudoroot-bind-defer TRUE by default (part of ITS#5440 fix)
This commit is contained in:
parent
831035f6be
commit
66b581643f
@ -139,11 +139,12 @@ If set before any target specification, it affects all targets, unless
|
|||||||
overridden by any per-target directive.
|
overridden by any per-target directive.
|
||||||
|
|
||||||
.TP
|
.TP
|
||||||
.B pseudoroot-bind-defer {NO|yes}
|
.B pseudoroot-bind-defer {YES|no}
|
||||||
This directive, when set to
|
This directive, when set to
|
||||||
.BR yes ,
|
.BR yes ,
|
||||||
causes the authentication to the remote servers with the pseudo-root
|
causes the authentication to the remote servers with the pseudo-root
|
||||||
identity to be deferred until actually needed by subsequent operations.
|
identity to be deferred until actually needed by subsequent operations.
|
||||||
|
Otherwise, all binds as the rootdn are propagated to the targets.
|
||||||
|
|
||||||
.TP
|
.TP
|
||||||
.B quarantine <interval>,<num>[;<interval>,<num>[...]]
|
.B quarantine <interval>,<num>[;<interval>,<num>[...]]
|
||||||
|
@ -802,7 +802,7 @@ meta_back_db_config(
|
|||||||
{
|
{
|
||||||
if ( argc != 2 ) {
|
if ( argc != 2 ) {
|
||||||
Debug( LDAP_DEBUG_ANY,
|
Debug( LDAP_DEBUG_ANY,
|
||||||
"%s: line %d: \"[pseudo]root-bind-defer {FALSE|true}\" takes 1 argument\n",
|
"%s: line %d: \"[pseudo]root-bind-defer {TRUE|false}\" takes 1 argument\n",
|
||||||
fname, lineno, 0 );
|
fname, lineno, 0 );
|
||||||
return( 1 );
|
return( 1 );
|
||||||
}
|
}
|
||||||
@ -818,7 +818,7 @@ meta_back_db_config(
|
|||||||
|
|
||||||
default:
|
default:
|
||||||
Debug( LDAP_DEBUG_ANY,
|
Debug( LDAP_DEBUG_ANY,
|
||||||
"%s: line %d: \"[pseudo]root-bind-defer {FALSE|true}\": invalid arg \"%s\".\n",
|
"%s: line %d: \"[pseudo]root-bind-defer {TRUE|false}\": invalid arg \"%s\".\n",
|
||||||
fname, lineno, argv[ 1 ] );
|
fname, lineno, argv[ 1 ] );
|
||||||
return 1;
|
return 1;
|
||||||
}
|
}
|
||||||
|
@ -99,6 +99,10 @@ meta_back_db_init(
|
|||||||
return -1;
|
return -1;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/* set default flags */
|
||||||
|
mi->mi_flags =
|
||||||
|
META_BACK_F_DEFER_ROOTDN_BIND;
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* At present the default is no default target;
|
* At present the default is no default target;
|
||||||
* this may change
|
* this may change
|
||||||
|
Loading…
Reference in New Issue
Block a user