CVS log for doc/man/man5/slapd.access.5

Up to [OpenLDAP] / doc / man / man5

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

Happy New Year

document ITS#5804 feature

happy belated New Year

ITS#6179 regex in <setstyle> is deprecated, use expand.

ITS#6023 minor formatting tweaks

(ITS#5852) ACL behaviour does not match Admin Guide

(ITS#5851 ACL behaviour does not match slapd.access(5))

Update copyright notices

Add ACL <who> regex-substitution from attribute value submatches. Cf ITS#5804

ITS#4556 clarify Add requirements

clarify selfwrite

Add CVS revision line

document 'add' and 'delete' privileges (ITS#5566)

s/2.3/2.4/ and more (ITS#5400)

explicitly present the ip masking algorithm

Happy New Year (belated)

slurpd is strongly deprecated

Use soelim to fix .so problem
(Assumes soelim is generally available)

happy new year

document support for IPv6 in ACLs (ITS#4756)

Update RFC references

clarify the required access to add the suffix of a database (consequence of ITS#4552)

Additional fix for ITS#4522. The "dn=" ist not optional.

fix ITS#4522; imply "+0" when no access is given

(very) basic documentation of "m"anage access

LDBM is obsolete.

factor ACI code out of slapd; now it can only use dynacl layer

Happy new year!

reflect additions to dynacl config syntax

provide a useful example

fix further ITS#3830 issues; allow to specify a matching rule for non-DN match

Manpage typos

<limits.h> cleanup && ITS#3643

more to partial fulfilment of ITS#3639

partial fulfilment of ITS#3639; need to check other backends thoroughly

update diagnostics and man pages

initial commit of "level" styles for "dn" and "self" by clauses (ITS#3615)

Document partially implemented "disclose" level.
"manage" remains undocumented (and unimplemented).

cosmetic changes

Happy New Year!

back out previous commit

move special dn patterns to style enum; add creator special dn pattern

<CONTROL> deserves a separate section

clearly indicate what the default rules are

Clarify which kinds of regexs are used.

document submatches provided by non-regex <what> clauses

Update SSF comments

small improvements

beautify and clarify <what> clause usage and defaults

clarify the use of regex and expand in by dn clauses

s/to/by/

mention new tools

mention new tools

mention new tools

- clarify when $$ must be used in regex;
- clarify access privileges of rootdn;
- clarify that auth access is always required when performing authz-regexp,
  not only for proxyAuthz

Rename config options and attribute names (for 2.3).

allow "expand" style in peername, sockname, sockurl as well; more sanity checks

use "expand" instead of "regex" for group ACLs that allow substring expansion, preserving backwards compatibility; add sanity checks

clarify that's useless to give write privileges to the roodn of a database...

Happy new year

for consistency, always allow 'onelevel' as an alias for 'one' in dnstyle

Document +0

some notes on access required by proxyAuthz control;
note that other controls may need different access
privileges via, e.g., backend_attribute() (syncrepl?)

Dont mention bare oc in list.

s/+/@/ in OC attr lists

more clarifications on dnstyle usage

add to 'val[.<style>=<value>' ACLs special match styles for DN-valued attributes; add negated objectClass to attribute name lists for ACLs and partial replication

Make a few OPERATIONAL REQUIREMENT clarifications
Clean up formating

describe detailed access levels required for each operation

clarify the usage of the <modifier> field in 'dn' and 'domain' clauses of <who> access directive

clarify that replacement, but not expression evaluation,
is done on the string in group.regex=string
We really should rename the style, in this case, to "replacement".

More for dynamic groups

ITS#2573 dynamic group support

ITS#2497 value-level ACLs

Change ACL default style to exact (from regex)

Rework CAVEATS

clarify DN regex match quirks

Clarify "users" terminology

cleanup

clarify global ACL use
clarify root and subschema DSE ACLs

Some dn.regex clarifications

Disable reverse lookups by default for security
(and performance) reasons.

delete (7) after UTF-8

only document 'subtree', but also allow 'sub'

allow 'sub' and 'subtree' in acl (fix ITS#2300)

Happy new year

Generate man page date from version.sh

Documentation patch #4  (ITS#1749)

			================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

Small changes:
- Fix typo slapd_meta -> slapd-meta in slapd-meta(5).
- Add slapd-dnssrv(5) to SEE ALSO in slapd.conf(5).
- Add descriptions of the files in FILES sections.
- Add $HOME/.udrc to FILES in ud(1) and ud.conf(5).
- Add ldaprc (without ".") and ENVIRONMENT VARIABLES in ldap.conf(5).
- Change manpage references to proper ".BR name (section)".

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, May 2002.

second round at ITS#1749

fix typo

Mostly based on patches provided by Hallvard B. Furuseth

ITS#1677 - cast away const warnings
ITS#1678 - unsigned char args to ctype funcs
ITS#1682 - don't redefine ldap_debug
ITS#1683 - uninitialized vars
ITS#1703 - ldo_debug initialization
ITS#1705 - unsigned testing
ITS#1706 - socklen_t args
ITS#1719 - back-tcl update (other cleanups/fixes/improvements; yet untested)
ITS#1724 - integerNormalize/integerFilter/integerIndexer bugs
ITS#1725 - libdes not required

Implement back-null (/dev/null style backend)
Cleanup some misc warnings ("%lu" format, unused/uninitialized vars,
        ambiguous operator precedence)

Kurt, please regenerate configure

Mention that objectClass names are valid in the attrs=<attrlist> clause.

Update copyright statements

Some minor adjustments

access control man page

remove extra '$' in regex (thanks to Buchan Milne)

Misc. updates from HEAD

Happy (belated) new year

import clarifications from HEAD

Sync with HEAD

First round of imports from HEAD

misc man page updates

Suck in changes from HEAD
    Fix slapd schema error alignment bug
    Update slapd SASL proxy policy code
    Update slapd require "strong" check
    Update back-bdb entry locking
    Add slapd disallow bind_simple_unprotected directive
    Add back-monitor added monitorContext support
    Add slapd IPv4/v6 only options
    Ass slapd SASL setpass support
    Remove lint
    Build Environment
        Add monitor backend test
        Update <ac/socket.h> SHUT_RDWR
        Fix SASL-less build issues
        Fix back-perl build issues

Suck in latest changes from HEAD

Suck in HEAD changes since 2.1alpha

backport fix

Happy new year!

clean up examples

sync with HEAD

Sync with HEAD

Happy new year

Sync with HEAD

(Partial) Sync with HEAD

remove excluded attribute bit

Sync with HEAD

Sync with HEAD

First rounded of changes in prep for 2.2.beta3

Last(?) set of changes before 2.2beta

Happy new year! (belated)

happy new year

Import ITS#4522 slapd.access(5) fix

ITS#4552 from HEAD - use ACLs to control adding suffix entry or children
of virtual suffix.

LDBM updates

Happy new year!

Sync with HEAD (need to update CHANGES)

Sync with HEAD

Sync with HEAD

Initial round of changes for 2.3 beta

Sync with HEAD

Happy New Year!

ITS#5804 documentation update

happy belated new year

ITS#6179

ITS#6023, more for slapschema as well

ITS#5852

ITS#5851

Update copyright for next release

ITS#5804

ITS#4556

clarify selfwrite

Add CVS revision line

ITS#5566

ITS#5400

Happy new year! (belated)

explicitly present the ip masking algorithm

Sync with HEAD for OL 2.4.5

Quick merge: everything from HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD