[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: group.regex
Does anyone knows in which version this is/will be fixed? I'm currently
using 2.1.29/i386/bdb 4.52.
Regards
P.
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> You;ll find the answer here:
>
> http://www.openldap.org/lists/openldap-bugs/200310/msg00089.html
>
> and here:
>
> http://www.openldap.org/lists/openldap-software/200310/msg00328.html
>
> greetings,
>
>
> _+Ace
>
>
>
> > Hi all,
> >
> > I am just beginning to learn the syntax for access control with slapd.
> > My question pertains to group regex's. The administrators manual and the
> > slapd.access man page leave me a little confused.
> >
> > Quote from the slapd.access man page:
> > ------------------------------------------------------------------------
> > The statement dn=<pattern> means that access is granted to the matching
> > DN. The optional style qualifier dnstyle allows the same choices of
> > the dn form of the <what> field. In addition, the regex form of
> > pattern can exploit substring substitution of submatches in the
> > <what> dn.regex clause by using the form $<digit>, with digit ranging
> > from 1 to 9.
> > ------------------------------------------------------------------------
> >
> > Do the submatches work for groups also. For instance, take the following:
> >
> > -------------------------------------------------------------
> > access to dn="cn=(.+),dc=example,dc=com"
> > by group.regex="cn=$1,cn=test,dc=example,dc=com" write
> > by * read
> >
> > access to * by * read
> > -------------------------------------------------------------
> >
> > If they do indeed work for group.regex, then I would expect that access
> > to an entry "cn=penguin,dc=example,dc=com" would be writable by the
> > group "cn=penguin,cn=test,dc=example,dc=com" right?
> >
> > I tried this and it didn't work. I get insuficient rights errors when
> > attempting to add an entry. Any help understanding this is appreciated.
> > I'm running openldap-2.1.21 on Linux(Fedora Core 1).
> >
> > Also, does anyone know of a good book that covers access control in
> > detail, or maybe links to some good tutorials or articles.
> >
> > Thanks,
> >
> > --
> > Matt M.
>
> - --
> Ace Suares' Internet Consultancy
> NIEUW ADRES: Postbus 2599, 4800 CN Breda
> telefoon: 06-244 33 608
> fax en voicemail: 0848-707 705
> website: http://www.suares.nl * http://www.qwikzite.nl
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux)
>
> iD8DBQFAgzOmy7boE8xtIjURAiL0AJ4hRIRcoi6328l+CX8hvVVV3WxeLACfb9Q5
> Bit5JHwaBDumGz0Mm3elQGA=
> =1y2Z
> -----END PGP SIGNATURE-----
>
>