[Date Prev][Date Next]
Re: ACLs, groups, and regular expressions... oh my
I'm bewilderd !
Howard Chu wrote:
> Regexp matching is not the same as globbing/wildcard expansion, which seems
> to be what you want. Your ACL pattern has no meaning. The parentheses "()"
> can only be used to delineate patterns in the target specification, and are
> only useful if you actually refer to those patterns using numeric
> substitutions "$1" "$2" in the subject specs.
However, wether one uses backreferences ($1, $2 etc) shouldn't matter while
the regex is evaluated.... and indeed, using () in the 'by' clause doesn't
make sense, but it's a valid regex....
> > >>
> > >> access to *
> > >> by group="cn=(.*),dc=example,dc=com read
> > >> by anonymous bind
> > >> by * none
if you have group entries like:
I would expect that the by clause 'by group="cn=(.*),dc=example,dc=com read'
would evaluate to any of these groups....