[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: cn=Log,cn=Monitor

Hi,

"Pierangelo Masarati" <ando@sys-net.it> writes:

>> Pierangelo Masarati wrote:

> database monitor
> access to *
>     by dn.exact="uid=Administrator,ou=People,dc=example,dc=com" write
>     by dn="uid=[^,]+,ou=People,dc=example,dc=com" read
>     by * none
>
> I checked out that you can also add a rootdn/rootpw pair
> and bypass acl checks; the naming context of the rootdn,
> of course, must be "cn=Monitor".

This doesn't work for me :-)
but
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.
database        monitor
access to dn.subtree=cn=Monitor
        by dn.exact="cn=admin,o=avci,c=de" write
        by dn.subtree=ou=partner,o=avci,c=de read
        by * none
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-
works fine

-Dieter


-- 
Dieter Kluenter  | Systemberatung
Tel:040.64861967 | Fax: 040.64891521
mailto: dkluenter@schevolution.com
http://www.schevolution.com/tour