[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: v2.0.11 ACL woes - SOLVED!



And the problem was that resolution of reverse addresses is turned off
by default in 2.0.11. Specify 
 --enable-rlookups in the configure if "domain" features in the ACL's.

Dave
--
Dave Lewney
Principal Systems Programmer, Computing Service
University of Sussex, Brighton BN1 9QJ. Tel: 01273 678354 Fax: 01273
271956


Dave Lewney wrote:
> 
> I've just upgraded from v2.0.7 to 2.0.11 . Running against the same
> slapd.conf anonymous searches work fine with v2.0.7 but are all denied
> with v2.0.11. ACLs look like ...
> 
> access to *
>         by domain=.*\.susx\.ac\.uk      read
>         by domain=.*\.sussex\.ac\.uk    read
>         by domain=localhost             read
>         by users                        read
>         by *                            none
> 
> It looks like the domain matches are failing.
> Anyone had similar experience?
> 
> Dave
> --
> Dave Lewney
> Principal Systems Programmer, Computing Service
> University of Sussex, Brighton BN1 9QJ. Tel: 01273 678354 Fax: 01273
> 271956