[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Ang. RE: Bdb defaults - WAS: problem importing entries.



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Pierangelo Masarati wrote:
| You see, I madew my own set of mistakes; this
|
|
|>access to dn.regex="^(.+,)?ou=.+,(dc=.+,?)+$"
|
|
| should have actually been
|
| access to dn.regex="^(.+,)?ou=.+,(dc=[^,]+)+$"
|
| in any case far from

Surely we need to allow (but not require) commas in there in the case of
multiple dc entries, so how about:
access to dn.regex="^(.+,)?ou=[^,]+,(dc=[^,]+,?)+$"
(still need to test it more myself)

(assuming we want the "who"'s in this clause to be able to add entries
to the ou and write to anything below the ou's to any depth they like).

|
|
|>>>access to dn="(.+,)?,ou=.+,(dc=.+,?)+$$"

BTW, there are still examples in 2.2.13's slapd.access(5) with $$ in the
target:

~            access to dn.regex="^(.+,)?dc=example,dc=com$$"
~                 by ...

...

~            access to dn.regex="^(.+,)?uid=([^,]+),dc=example,dc=com$$"
~                 by dn.regex="^uid=$1,dc=example,dc=com$$" write
~                 by ...

~            access to dn.regex="^(.+,)?uid=([^,]+),dc=example,dc=com$$"
~                 by dn.exact,expand="uid=$1,dc=example,dc=com" write
~                 by ...

Regards,
Buchan

- --
Buchan Milne                      Senior Support Technician
Obsidian Systems                  http://www.obsidian.co.za
B.Eng                                RHCE (803004789010797)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFA0fferJK6UGDSBKcRAo7yAKCZ3hAVyMKDH6Yc24CE962cBjF6fQCeNQkC
6yd6yggxB0f2lt5+J/qVkFA=
=I9i9
-----END PGP SIGNATURE-----