[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Regex access problem in slapd.conf

I have actually tried the regex you mentioned ([^,]*) with no success either.

You also mentioned that the uid and the cn aren't the same, which is true.
 In fact, I have actually dumbed down what I am really trying to do,
hoping to get a first step towards solving my real problem.

The real uids are in the form of an email address, ie.
uid=memphis@someorg.org, blah blah blah.  The cn is a group, in the form
of the domain, ie. cn=someorg.org, blah blah blah.  So my original regex
was more along the lines of:
access to * by dn=uid=([a-zA-Z0-9]*)@(.*),ou=Users,o=ORG,c=US

I'll try your example just to make sure, since it was some late night work
last night, but I'm quite sure that I have used that one and it did not
populate the vars either.


> fre, 2003-01-03 kl. 14:53 skrev Tony Earnshaw:
>> fre, 2003-01-03 kl. 11:32 skrev Paul Wilson:
>> I'm sure many others will reply, but as far as I can see from
>> slapd.conf and the debug output, you are trying to equate uid with cn.
>> They aren't the same.
>> The regex stuff works perfectly for me with 2.1.5 to 2.1.10, but it is
>> advisable to be consequent ...
>> access to * by dn="uid=(.*),ou=Users,o=ORG,c=US"
>> group="cn=$1,ou=Users,o=ORG,c=US" write by
>> dn="uid=Manager,ou=Users,o=ORG,c=US" write by anonymous auth
>> The problem that I am having is that the $1 variable is not being
>> populated.  As I understand regular expressions, the (.*) should match
>> on any pattern.
> Hmmm ... looking at it again, the slapd.conf syntax isn't Kosher,
> either.
> access to dn="cn=([^,]+),ou=Users,o=ORG,c=US"
>   by anonymous auth
>   by dn="cn=$1,ou=Users,o=ORG,c=US" read (i.e. "by self read")
>   by group="cn=Managers,ou=Users,o=ORG,c=US" write
>   by * none
> The above is trash, I realize, but the syntax is o.k. as an example.
> The indents and paraphrazing are important - don't put comments (like I
> have done) or newlines or anything else in your rules.
> Best,
> Tony
> --
> Tony Earnshaw
> When all's said and done ...
> there's nothing left to say or do.
> e-post:		tonni@billy.demon.nl
> www:		http://www.billy.demon.nl