matching ou=(.*)=.. to dn=$1,ou=.. help

[tarjei@nu.no]

Hi,

I'm implementing ldap personal adressbooks for Turba/imp the first webmail and
adressbook system  that I've seen that contaings propper write support for ldap.
I've come quite far. (for those interested, I'll probably post a howto soon).

But, I got one problem. Each user has his/hers own ou. That is I got something like:

ou=personal,dc=domain,dc=com
 \
   - ou=USERID,ou=personal,...
   - ou=USERID,ou=personal,...
   - ou=USERID,ou=personal,...
etc
now, I want to define an acl like this:

access to dn="ou=(.+),ou=personlige_adresser,o=nu,c=no"
        by dn="uid=$1,ou=Brukere,o=nu,c=no" write
        by * none

i.e. that only users can read and write to their adressbooks.

Now, can someone point out the obious misstake I am doing? I've used an hour
searching the maillinglist now, so please :)

Tarjei

-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/