[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ACLs: 'and' clause in ACLs



Thank you very much for your reply.

Pierangelo Masarati wrote:
See the "<control>" field in slapd.access(5); for example (RE22/HEAD):

access to *
    by dn.exact="cn=foo" =rw continue
    by peername.ip="127.0.0.1" +0 stop
    by * auth

gives "rw" (read + write) access to "cn=foo", and confirms it if the
request comes from "127.0.0.1" (the "break" is redundant, of course);
otherwise, privileges are reset to "auth", which applies to "*".

I forgot a little detail: we are using version 2.0.27 (duh).
We replaced peername.ip with peername, this way it's been accepted by slapd. Unfortunately it doesnt work, as it even refuses to bind. Replacing =rw with "write" didn't make it either.
Any further help appreciated.


Thank you very much