[Date Prev][Date Next] [Chronological] [Thread] [Top]

Inconsistent acl format requirements (ITS#2478)

Full_Name: Quanah Gibson-Mount
Version: 2.1.17+indexing patch
OS: Solaris 8
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (

I found that I can sometimes specify multiple syntaxes along the lines of:


For example:

by dn="cn=<blah>"
by dn="<blah>" both work.

but with other by types, I can only do one, for example:

by group.base="cn=<blah>" works but
by group.base="<blah>" does not.

This seems to be inconsistent behavior... I'd expect everything to require the
"cn=<blah>" format...
(Of course, something other than cn can be used, but that just happens to be
what I use in almost all my ACLs).