Re: acl problem

To: <openldap-technical@openldap.org>
Subject: Re: acl problem
From: Hallvard Breien Furuseth <h.b.furuseth@usit.uio.no>
Date: Sat, 28 Dec 2013 11:52:04 +0100
In-reply-to: <20131228093657.42485651@rubin.fritz.box>
References: <83F4AF6808820F419C8919CC1356D0E11D7E5484@HVN-VSRV-MBX2.HVN.uni-hamburg.de> <20131228093657.42485651@rubin.fritz.box>
User-agent: Roundcube Webmail/hz/2m6f.frs/uio-2

On 2013-12-28 09:36, Dieter KlÃnter wrote:

[...]
by dn.base="cn=replication_low_security,dc=organisation,dc=com" none
by * break


the break rule will be ignored, as 'none' is the implicit last rule.


No, "none" does not imply "this is the last rule".  OTOH there
is an implicit last "by * none", hidden by the "by * break".

[...]

run slapd with -dacl


Indeed.

--
Hallvard

Follow-Ups:
- RE: acl problem
  - From: "Mundry, Marvin" <Marvin.Mundry@uni-hamburg.de>

References:
- acl problem
  - From: "Mundry, Marvin" <Marvin.Mundry@uni-hamburg.de>
- Re: acl problem
  - From: Dieter KlÃnter <dieter@dkluenter.de>