[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#3877) Enhancement: openldapACIValidate implementation

Full_Name: Nikita Shulga
Version: HEAD
OS: Linux
URL: ftp://ftp.openldap.org/incoming/nikita-shulga-050722.patch
Submission from: (NULL) (

In attached patch openldapACIValidate function is implemented.
It checks that openldapACI entry are syntaxicaly valid, 
although it doesn't check sanity of this aci - for example, 
aci_list_get_rights allows more then one grant|deny clause in aci, so validator
allows it to, despite the fact that aclmodel draft prohibits more then one
grant|deny entry, etc...
Also, subject are yet not validated, since it validation depends of subject

I'm not sure that this is needed, but just in case:

I, Nikita Shulga, hereby place the following modifications to OpenLDAP Software
(and only these modifications) into the public domain. Hence, these
modifications may be freely used and/or redistributed for any purpose with or
without attribution and/or other notice.