Re: "hidden" attributes in openldap?

[Christian Manal <moenoel@informatik.uni-bremen.de>]

Am 16.03.2011 16:31, schrieb George Mamalakis:
> so I tried to implement it through acls. I created a group called i.e.
> "cn=publish mail,ou=Groups,dc=example,dc=com" where people wishing to
> disclose their emails are members of this group. On the acl statement I
> couldn't find a way to restrict my acl based on "conditional attributes".

You mean something like this?

   access to attrs=mail
      by group="cn=publish mail,ou=Groups,dc=example,dc=com" read
      by * none

See slapd.access(5) for details.


Regards,
Christian Manal