access control @#!

["Tony C. Wu" <tonywu@att.net.tw>]

Hi,

I am beaten by the access control. I tried the manual, openldap web site
and administrator's guide. I can't figure out why the following ACL doesnt
work.

# ldbm access control definitions
defaultaccess none
access to attr=userpassword by self write by * compare
access to dn=".*,dc=mydomain,dc=com,dc=tw" by addr="192.168.1.*" read

This is supposed to allow 'userpassword' to be compared by everybody, and
grant read access to requestors from 192.168.1.* subnet and deny everyone
else. Is that correct ?
Where can i find more infos on the ACLs and indexes ? The manual pages and
administrators guide are not very clear on these topics.

Thanks for any inputs,

Regards,
Tony C. Wu
--
Software is like sex, it's better when it's free -- Linus Torvalds.