On 7/7/20 3:11 PM, Côme Chilliet wrote: > Le Tue, 7 Jul 2020 14:52:30 +0200, > Michael Ströder <[email protected]> a écrit : >> Do you actually see any value of attribute 'supportedControl'? >> >> If not, did you explicitly request the attribute 'supportedControl' >> when reading rootDSE or used '+' in the attribute list? > > I use '+', and it does return supportedControl. > >> On which platforms are you testing FusionDirectory? > > Debian. > Here is the setup for the automated test ldap server: > https://github.com/php/php-src/pull/5794/files#diff-49f45f40446e443fc480bb7d54078f24 > > The author has the same problem as I do: > https://github.com/php/php-src/pull/5794#issuecomment-652933484
Sorry, I won't wade through all this. As said: Debian has slapo-ppolicy. But you should simply check whether ldapsearch returns the attribute 'supportedControl' or whether possibly ACLs deny access. E.g. try first ldapsearch option -D <root-DN> to authenticate as rootdn for which no ACLs are applied. Ciao, Michael.
