[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: "dynamic" acls

>>>>> "Quanah" == Quanah Gibson-Mount <quanah@stanford.edu> writes:

    >> is it possible to apply new acl rules without restarting slapd?
    >> like disallowing some users acces to a certain branch of the
    >> ldap tree...

    Quanah> That is not possible at this time with ACL's.

What you CAN do though (even though it's experimental, but works
fine for me) is to use ACI's (http://www.openldap.org/faq/index.cgi?file=758).