[Date Prev][Date Next]
dn[.<dnstyle>[,<modifier>]]=<pattern> in ACLs
The slapd.access(5) manual page states that the following pattern is
valid as an expression for the <who> part of a slapd access-control
However, in section 5.3 of the OpenLDAP 2.1 Administrator's Guide
where the BNF-style grammar for ACLs is written, there is no room,
anywhere, for a [,<modifier>] part; there's
dn[.<basic-style>]=<regex> | dn.<scope-style>=<DN>]
...and that's all, for <who> values that may start with "dn.",
according to that grammar.
Not meaning to be pedantic, just wanting to make sure that the guide
is consistent with the manual pages, and with the application.