On Tue, Aug 01, 2023 at 09:09:43AM +1000, Sean Gallagher wrote: > 3) Finally, if the system admin wants to use the TLS layer authentication > state to subtly modify access rights, that is also allowed by the RFCs, BUT > NOT BY SLAPD. > > I find slapd's incapacity in the third case to be a bizarre inconsistency.
The ACL subsystem is extensible well beyond this and I find it bizarre that you keep ignoring that. -- Ondřej Kuzník Senior Software Engineer Symas Corporation http://www.symas.com Packaged, certified, and supported LDAP solutions powered by OpenLDAP
