[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ACL based on superior entry

To: openldap-technical@openldap.org
Subject: Re: ACL based on superior entry
From: "Dieter Kluenter" <dieter@dkluenter.de>
Date: Wed, 01 Dec 2010 12:31:39 +0100
In-reply-to: <4CF5FE37.4050005@stroeder.com> (Michael Ströder's message of "Wed, 01 Dec 2010 08:50:15 +0100")
References: <4CF5FE37.4050005@stroeder.com>
User-agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.5-b29 (linux)

Michael Ströder <michael@stroeder.com> writes:

> HI!
>
> Is it possible to grant access in an ACL by a certain attribute value of the
> superior entry?
>
> I'd like to be able to disable bind for users based on a status flag in the
> container entry under which all user entries reside.

sets come to my mind. Something like
access to cn=something
       by user & [cn=other\attributetype & value]

more on sets at http://www.openldap.org/faq/data/cache/1133.htm

-Dieter

-- 
Dieter Klünter | Systemberatung
http://dkluenter.de
GPG Key ID:8EF7B6C6
53°37'09,95"N
10°08'02,42"E

Follow-Ups:
- Re: ACL based on superior entry
  - From: "Dieter Kluenter" <dieter@dkluenter.de>

Prev by Date: Re: how to compile recent openldap on Centos 5.5
Next by Date: Re: ACL based on superior entry
Index(es):
- Chronological
- Thread