[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: saslAuthz failing to compare

To: Tony Earnshaw <tonye@billy.demon.nl>, Openldap list <openldap-software@OpenLDAP.org>
Subject: Re: saslAuthz failing to *compare*
From: Quanah Gibson-Mount <quanah@stanford.edu>
Date: Sat, 06 Mar 2004 10:43:34 -0800
Content-disposition: inline
In-reply-to: <1078585121.8568.31.camel@localhost>
References: <1078560813.22580.126.camel@urkle.vernon.hills> <4049957B.5070006@sys-net.it> <1078585121.8568.31.camel@localhost>

--On Saturday, March 06, 2004 3:58 PM +0100 Tony Earnshaw <tonye@billy.demon.nl> wrote:

That notwithstanding: I found out by myself that my 2.1.x ACLs didn't
work as expected any more, until I started using "dn.mumble=cn=mumble"
style" (thanks for the new wildcard, Wietse :) ACLs. Now they work much
better and consistently with "intuition" (depending on one's intuition,
I suppose).

Yes, the 2.2 ACL structure is *much* tighter than 2.1. Although your 2.2 ACL's will work on 2.1 (I slowly upgraded all my 2.1 ACL's to work in 2.2 format prior to migration so I wouldn't have any problems. :) ).

--Quanah


--
Quanah Gibson-Mount
Principal Software Developer
ITSS/TSS/Computing Systems
ITSS/TSS/Infrastructure Operations
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

References:
- saslAuthz failing to *compare*
  - From: Edward Rudd <eddie@omegaware.com>
- Re: saslAuthz failing to *compare*
  - From: Pierangelo Masarati <ando@sys-net.it>
- Re: saslAuthz failing to *compare*
  - From: Tony Earnshaw <tonye@billy.demon.nl>

Prev by Date: Re: Integration: MIT Kerberos V and OpenLDAP with SASL/GSSAPI
Next by Date: RE: Integration: MIT Kerberos V and OpenLDAP with SASL/GSSAPI
Index(es):
- Chronological
- Thread

Re: saslAuthz failing to *compare*

Re: saslAuthz failing to compare