Re: aci

[Adam Williams <awilliam@whitemice.org>]

>I use openldap-2.0.23 on sparc/solaris8.
>I use ACI, it seems work well, exsept [entry].
>I have red http://www.openldap.org/faq/data/cache/634.html carefull.
>And I've tried to do like
>OpenLDAPaci: 
>3#entry#grant;r,s,c;macAddress,[entry]#group#cn=customer,ou=groups,dc=planetsky,dc=com 
>I want to give a read access to macAddress to members of 'customers' group. But they can not read macAddress.
>Does somebody know - is it bug, or may be my have done something wrong....
>If I put [all] instead of [entry] it works of cause.

What about something like -
3#entry#grant;r,s,c;macAddress;s,c;[all]#group#cn=customer,ou=groups,dc=planetsky,dc=com