[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: group ACLs for a newbie

To: andrew tristan <atristan@math.ucr.edu>
Subject: Re: group ACLs for a newbie
From: Stuart Lynne <sl@fireplug.net>
Date: Tue, 3 Nov 1998 21:26:10 -0800
Cc: openldap-stable@openldap.org
In-reply-to: <199811040458.UAA18584@charity.ucr.edu>; from andrew tristan on Tue, Nov 03, 1998 at 08:58:32PM -0800
References: <199811040458.UAA18584@charity.ucr.edu>

On Tue, Nov 03, 1998 at 08:58:32PM -0800, andrew tristan wrote:
> My persons are divided up between private and public.  I want to be
> able to offer public entries to anyone, but restrict access to the 
> private ones.  I assume that this is done with group ACLs, is this
> correct?  Anyone got any pointers or documentation on how this would
> work?

Standard ACL's work by matching your entries. Typically you just have
separate parts of the hierarchy with separate rules based on their names.

Group acl's work by allowing you to specify an entry which in turn contains
a multi-valued attribute that contains the DN's of specific entries that are
allowed to do something. In effect superseding matching by DN patterns.

-- 
Stuart Lynne <sl@fireplug.net>      604-461-7532      <http://www.fireplug.net>
PGP Fingerprint: 28 E2 A0 15 99 62 9A 00  88 EC A3 EE 2D 1C 15 68

References:
- group ACLs for a newbie
  - From: andrew tristan <atristan@math.ucr.edu>

Prev by Date: group ACLs for a newbie
Next by Date: Compiling Error on AIX
Index(es):
- Chronological
- Thread