--On Friday, October 27, 2023 8:15 PM +0200 Alejandro Imass
<[email protected]> wrote:
Again for future people reading this, if you encounter ACL issues and you
want to modify the LDIF database in /etc/openldap/slapd.d don't do it
manually.
Your advice here is generally wrong.
You mean they SHOULD edit them manually ?
I'm actually suggesting to use slapadd and slapmodify directly on the
filesystem if everything else fails.
What's wrong with that suggestion?
You should have a properly configured system that allows modification of
cn=config via ldap* commands while the system is online. slapmodify can be
useful in specific circumstances but it's not the best solution here.
--Quanah
