[Date Prev][Date Next] [Chronological] [Thread] [Top]

dn[.<dnstyle>[,<modifier>]]=<pattern> in ACLs

The slapd.access(5) manual page states that the following pattern is
valid as an expression for the <who> part of a slapd access-control


However, in section 5.3 of the OpenLDAP 2.1 Administrator's Guide
[http://www.openldap.org/doc/admin21/slapdconfig.html#Access%20Control ]
where the BNF-style grammar for ACLs is written, there is no room,
anywhere, for a  [,<modifier>] part; there's

   dn[.<basic-style>]=<regex> | dn.<scope-style>=<DN>]

...and that's all, for <who> values that may start with "dn.",
according to that grammar.

Not meaning to be pedantic, just wanting to make sure that the guide
is consistent with the manual pages, and with the application.

thank you,

sean hamp