[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#3633) slapd.access man page inaccuracy



peter@adpm.de wrote:

>Full_Name: Peter Marschall
>Version: 2.2.24
>OS: Linux
>URL: ftp://ftp.openldap.org/incoming/
>Submission from: (NULL) (84.56.103.37)
>
>
>slapd.access(5) does not list "attr" as an aliasfor "attrs" in the <who> part of
>an ACL.
>  
>
The fact that the code "erroneously" allows something doesn't mean that 
it has to be reflected in the documentation.  Earlier versions did a

    if ( strncmp( left, "attr", 4) == 0 )

so "attrlifeisbeatiful=userPassword" would have matched.  When we 
decided to rationalize that check, we wanted that directive to be 
"attrs" only, but there were many significant deployments using "attr" 
so we decided to leave both and advertize only "attrs".  I'd rather 
change the code to refuse "attr", or, as a fallthru solution, leave the 
manpage as is (maybe adding a warning about "attr" being deprecated).

p.

>This patch should fix it:
>--- doc/man/man5/slapd.access.5 2005-04-05 16:17:46.368330284 +0200
>+++ doc/man/man5/slapd.access.5 2005-04-05 16:20:01.474599840 +0200
>@@ -74,7 +74,7 @@
>        *
>        [dn[.<dnstyle>]=<DN>]
>        [filter=<ldapfilter>]
>-       [attrs=<attrlist>[ val[.<style>]=<attrval>]]
>+       [attr[s]=<attrlist>[ val[.<style>]=<attrval>]]
> .fi
> .LP
> The wildcard
>  
>



    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497