Re: set.regex and substring substitution

[Pierangelo Masarati <masarati@aero.polimi.it>]

Ronie Gilberto Henrich wrote:
> Hi Aaron,
>
> Isn't it the same as setting loglevel 128 (access control list
> processing) in /etc/openldap/slapd.conf ?
>
> This is the slapd.access acl:
> access to dn.regex="^(.+,)?ou=([^,]+),ou=Mail,o=example,c=BR$"
>   by set.regex="user/allowedDomain & $2" write

Try

access to dn.regex="^(.+,)?ou=([^,]+),ou=Mail,o=example,c=BR$"
  by set.regex="user/allowedDomain & [$2]" write

since the domain, after regex expansion, should be treated as a literal. 
 Moreover,

access to dn.regex="^(.+,)?ou=([^,]+),ou=Mail,o=example,c=BR$"
  by set.expand="user/allowedDomain & [$2]" write

should be more appropriate.

p.