[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#6057) "slapo-rwm interferes with content-sensitive ACLs"



----- admin@dmarkey.com wrote:

> Full_Name: David Markey
> Version: 2.4.15
> OS: Debian
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (86.47.26.12)
> 
> 
> When using a slapo-rwm in conjunction with filter based ACL like 
>  
> access to filter="memberOf=cn=staff,ou=groupofnames,dc=thunderbird"
> 
> This wont work unless the client explicitly requests the memberOf
> attribute.
> 
> The client in this case in thunderbird, which doesn't request the
> memberof
> attribute

You should specify the context of your use of slapo-rwm.  The limitation might not be in the overlay itself, but in your design of the DSA that uses slapo-rwm.  Unless a more detailed description of the configuration highlights a true software bug or design issue, I'm keen to considering this a user error.

p.


Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Fax:     +39 0382 476497
Email:   ando@sys-net.it
-----------------------------------