directory-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Pierre Smits <pierre.sm...@gmail.com>
Subject DS M16 and Studio M2
Date Tue, 25 Mar 2014 15:29:28 GMT
Hi All,

Shouldn't it be so that others than the identified ApacheDs administrators
(like uid=admin,ou=system) shouldn't be able to see the attributes of the
Root DSE? When I use Apache Studio M2 v2.0.0.v20130628, any user can see
details all the naming context (including those not of his partition and
supportedSASLMechanisms).

I would say that this shouldn't be happening, as it could be a security
risk.

What do you think?

Regards,

Pierre Smits

*ORRTIZ.COM <http://www.orrtiz.com>*
Services & Solutions for Cloud-
Based Manufacturing, Professional
Services and Retail & Trade
http://www.orrtiz.com

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message