group.regex not implemented?

[Sebastian Dietzold <dietzold@imise.uni-leipzig.de>]

Hi There,

The last 4 hours i try to write an acl that give rights to an object for a
role (or group). i make a test-server for this with these 3 aci's:

my tree consists of more than on organisation-subtrees und c=de.
i want to make a rule that gives the OrganizationAdministratorRole (or
group) all rights for his subtree:


---
access to dn="^c=de$" by * read

# THIS RULE IS IGNORED BY THE SERVER
access to dn="o=(.+),c=de$"
  by group.regex="^cn=admin,ou=Groups,o=$1,c=de$" write
  by * none

# anyone can bind
access to * by * auth
---

Can i forget my intention cause this is not implemented yet?

Is it my fault?

Has anybody here used such an ACL?


I hope somebody can help me with that.

   Sebastian Dietzold

-- 
Sebastian Dietzold
Institute for Medical Informatics,
Statistics and Epidemiology (IMISE)
University of Leipzig
Liebigstrasse 27
04103 Leipzig
Phone: +49 (0)341-9716114
Fax:   +49 (0)341-9716130