https://fedorahosted.org/389/ticket/26 https://fedorahosted.org/389/attachment/ticket/26/0001-Trac-Ticket-26-Please-support-setting-defaultNamingC.patch Fix descriptions: 1) Introducing an attribute defaultNamingContext to rootdse. 2) To support it, a config parameter nsslapd-defaultnamingcontext is added. . Suffix created in setup is set to nsslapd-defaultnamingcontext in createConfigFile (DSCreate.pm). . If the default naming context is deleted from mapping tree, the config parameter nsslapd-defaultnamingcontext as well as the attribute defaultNamingContext in rootdse are removed. . When nsslapd-defaultnamingcontext does not exist, there are 3 ways to set it. a) Next added suffix is automatically set. b) Add nsslapd-defaultnamingcontext value to cn=config using ldap client. c) Shutdown the server and add nsslapd-defaultnamingcontext value to cn=config . nsslapd-defaultnamingcontext value could be replaced with other existing suffix with ldap modify operation. In addition, invalid read was reported by valgrind when a suffix was removed. To solve it, adding a write lock to dse_call_callback. -- 389-devel mailing list 389-devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-devel