From: Quanah Gibson-Mount <quanah@openldap.org>
Date: Tue, 4 Jan 2011 00:51:06 +0000 (+0000)
Subject: ITS#6364
X-Git-Tag: OPENLDAP_REL_ENG_2_4_24~176
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=4b5ffab2a8dc81616c0f5e0630ff697cd553ab04;p=openldap

ITS#6364
---

diff --git a/CHANGES b/CHANGES
index 50aac39e74..da1a9b8f7d 100644
--- a/CHANGES
+++ b/CHANGES
@@ -69,7 +69,9 @@ OpenLDAP 2.4.24 Engineering
 		Removed antiquated SunOS LWP support (ITS#6669)
 	Documentation
 		admin24 guide typo fixes (ITS#6609)
+		admin24 guide refint rootdn requirement (ITS#6364)
 		ldap_open(3) document ldap_set_urllist_proc (ITS#6601)
+		slapo-refint(5) rootdn requirement (ITS#6364)
 
 OpenLDAP 2.4.23 Release (2010/06/30)
 	Fixed libldap to return server's error code (ITS#6569)
diff --git a/doc/guide/admin/overlays.sdf b/doc/guide/admin/overlays.sdf
index 3c29daabe2..9cdf2759fd 100644
--- a/doc/guide/admin/overlays.sdf
+++ b/doc/guide/admin/overlays.sdf
@@ -1009,6 +1009,8 @@ If we removed all users from the directory who are a member of this group, then
 would be a single member in the group: {{F:cn=admin,dc=example,dc=com}}. This is the
 {{F:refint_nothing}} parameter kicking into action so that the schema is not violated.
 
+The {{rootdn}} must be set for the database as refint runs as the {{rootdn}} to gain access to
+make its updates.  The {{rootpw}} does not need to be set.
 
 H3: Further Information
 
diff --git a/doc/man/man5/slapo-refint.5 b/doc/man/man5/slapo-refint.5
index 6da66dcea1..9609b316e0 100644
--- a/doc/man/man5/slapo-refint.5
+++ b/doc/man/man5/slapo-refint.5
@@ -31,6 +31,12 @@ attribute containing that DN.
 Entries matching that search would have their
 .B manager
 attribute deleted and replaced by the new DN.
+.LP
+.B rootdn
+must be set for the database.  refint runs as the rootdn
+to gain access to make its updates.
+.B rootpw
+is not needed.
 .SH CONFIGURATION
 These
 .B slapd.conf