[Date Prev][Date Next]
Re: Limits on anonymous binds
Mark Adamson wrote:
> > > limits dn.exact=anonymous <limit>
> > >
> > > -or-
> > >
> > > limits dn.anonymous <limit>
> > The proposed change would alter what is the usual behavior, in
> > that default limits would apply to everybody not explicitly
> > limited, except for anonymous.
> > What should happen if no anonymous limits are set? use default?
> The proposed change wouldn't affect existing installations. You would have
> to add in a "limits dn.anonymous" directive to your slapd.conf to get
> anonymous binds to be limited differently than default limits. It is that
> way now with non-anon binds: they get set to default unless you add a
> "limits dn.[exact|regex]" directive. I'd list this proposal under "new
> feature which people can turn on with slapd.conf"
> If no anon limits are set, the defaults apply, just like with exact and
> regex limits.
That's right. Then if there's no adverse ideas, I'll prefer to
code it as dn.anonymous.
Dr. Pierangelo Masarati | voice: +39 02 2399 8309
Dip. Ing. Aerospaziale | fax: +39 02 2399 8334
Politecnico di Milano | mailto:email@example.com
via La Masa 34, 20156 Milano, Italy |