Re: Changes

Atif Ghaffar wrote:
> 
> 
> On 5/26/06, *Joerg Delker* <[email protected] <mailto:[email protected]>> wrote:
> 
>      > 4.) Here it may get difficult:
>      >
>      > suffix "o=ispman,dc=example,dc=com"
>      > rootdn "cn=admin,dc=example,dc=com"
>      >
>      > This wont work. Why?
>      >
>      > from /var/log/syslog:
>      >  /etc/ldap/slapd.conf: line 67: rootpw can only be set when rootdn is
>      > under suffix
> 
>     that should be fine as it is
> 
> Shouldnt the rootdn be
> "cn=admin,o=ispman,dc=example,dc=com"
> instead of
> "cn=admin,dc=example,dc=com"

Yes and no ;)

The slapd.conf example actually suggest a potential bad suffix, because 
it just sticks the configured ldapBaseDN in there.
For a base DN like above this is not necessarily the smartest idea 
(although it's possible).

Therefor, with a (better) suffix of dc=example,dc=com, the root DN is valid.
But for the sake of our slapd.conf example (in which we can't forsee the 
  configured ldapRootDN) we better put that within the ldapBaseDN.

In fact, this is already contained in install-data/ispman.config (1.16).

Best regards,
Joerg