[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: nested/coupled <who> clauses in ACLs

--On Saturday, July 09, 2005 12:21 AM -0400 "Eric A. Hall" <ehall@ehsco.com> wrote:

On 7/8/2005 11:25 PM, Quanah Gibson-Mount wrote:

--On Friday, July 08, 2005 10:14 PM -0400 "Eric A. Hall" <ehall@ehsco.com> wrote:

Let's say that I want to make a group of entries accessible to
anonymous, but only when it is connecting from localhost. EG:

 access to <foo>
   by anonymous(peername.ip=   read
   by *                                  none

Did you read the slapd.access manpage?

Yes, and I'm still looking for an answer

The answer is there, if you read it closely enough.

Anyhow, you about have it right.  I use:

access to <foo>
   by peername.ip= anonymous read


Quanah Gibson-Mount
Principal Software Developer
ITSS/Shared Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

"These censorship operations against schools and libraries are stronger
than ever in the present religio-political climate. They often focus on
fantasy and sf books, which foster that deadly enemy to bigotry and blind
faith, the imagination." -- Ursula K. Le Guin