[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: "Hide" certain DNs

Andrew Cobaugh writes:
> I have tried something like this:
> access to dn.base="cn=psu.facstaff,dc=psu,dc=edu"
>     by * none
> This actually ended up preventing other dn's from showing up.

Prevented others from showing up in what kind of searches?  It also
prevents you from using that DN as the base DN of a search.  See
OPERATION REQUIREMENTS in man slapd.access.  If that's not intended,
try 'by * =scxd' instead.  See THE <ACCESS> FIELD in the manpage.
Or omit the 'd' with older OpenLDAP versions.