ldapv3.pdf 7947KB Apr 17 2013 11:30:42 AM - mirror omadata

A Limitation?
One "limitation" of OpenLDAP is that the ACL constructs are
stored in the DSA's configuration file (usually slapd.conf) and thus
they can only be modified by bouncing the server.
In defense of OpenLDAP's "limitation" is that a well thought out
directory will require few if any adjustments to the ACL constructs.
The necessity of frequent ACL changes indicates a problem with
the directories structure or implementation. Constant changes will
also inevitably result in granting access to inappropriate parties.
Design and implement, not vice versa.
If you need highly flexible and granular access control see -
Access Control with ACI