Re: ACL and multiple mandatory conditions

[manu@netbsd.org (Emmanuel Dreyfus)]

Pierangelo Masarati <ando@sys-net.it> wrote:

> Your fault?  I see code for expansion in place (although I didn't check
> whether it works as intended).

Indeed it seems I forgot one bit, in servers/slapd/acl.c:

    if ( a->acl_attrval_style == ACL_STYLE_REGEX ) {
        Debug( LDAP_DEBUG_ACL,
                    "acl_get: valpat %s\n",
                     a->acl_attrval.bv_val, 0, 0 );
         if ( regexec( &a->acl_attrval_re, val->bv_val, 0, NULL, 0 ) )

This regexec does not collect matches, I susepct this is the problem

> with -d acl you get something.

Thanks. And -d acl,trace is even better, to get submatches expantion.

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@netbsd.org