[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Auth access for search-based mappings?

Howard Chu wrote:
> For your case, you need to come up with a single search specification that
> will handle both branches of your search. One possible solution would be to
> use entryDN in the filter:

Typo in here, should be dnSubtree:=ou=bio,...

> ldap:///dc=example,dc=com??sub?
>   (&(|(entryDN:dnSubtree:=ou=eng,dc=example,dc=com)
>       (entryDN:dnSubtree:ou=bio,dc=example,dc=com))
>     (uid=$1)(objectclass=person))

  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/