[Date Prev][Date Next] [Chronological] [Thread] [Top]

filter in ACL?



Does openldap support the similar approach as NDS does below?
 
aci: (target="ldap:///dc=tamu,dc=edu";)
  (targetfilter="(homephonesuppress=true)")
  (targetattr = "homephone")
  (version 3.0; acl "do not show users' homephone";
   allow(none)
   userdn = "ldap:///anyone";;)

So the server can react differently depending on how users set the
homephonesuppress attribute in their entries.  Specifically, if the
homephonesuppress is set to 'true', than the value in the attribute
homephone is visible to nobody.  Otherwise, it's visible to the public.

Thanks,

Bing

Bing Du <bing-du@tamu.edu, 979-845-9577>
Texas A&M University, CIS, Operating Systems, Unix