dn.regex expansion in ACL by clause (ITS#1285)

[staff@kern.nl]

Full_Name: Wouter Coene
Version: 2.0.11
OS: Linux (Debian 2.2)
URL: 
Submission from: (NULL) (212.19.213.34)


In an ACL, a dn.regex directive in the 'by' clause is not expanded with the
results
obtained in a regular expression 'to' clause, contrary to a group directive.

Example:

	access to dn="cn=[^,]*,ou=([^,]*),o=root"
		by dn="ou=$1,o=root" write

The solution would be to add expansion code to the ACL code in
servers/slapd/acl.c,
but since I'm no OpenLDAP expert, I'd rather not touch the code.

Is someone planning to implement this?