Re: access control, groups/organizationalRole

["Dieter Kluenter" <dieter@dkluenter.de>]

Frederik Bosch <frederik.bosch@gmail.com> writes:

> Hello,
>
> I am trying to setup an access control rule, but failed. All occupants
> of the objectClass organizationalRole which has a certain location may
> have read access. How do I setup this rule in slapd.conf?
>
> This is my line at the moment. This matches the dn of the
> occupant. But how do I match the location attribute of the
> organizationalRole?
>
> access to * by
> group/organizationalRole/roleOccupant="cn=Administrator,dc=example,dc=com"
> read

slapd.access(5)
access to * by
group=cn=Administrator,dc=example,dc=com attrs=location

-Dieter

-- 
Dieter Klünter | Systemberatung
sip: 7770535@sipgate.de 
http://www.dpunkt.de/buecher/2104.html
GPG Key ID:8EF7B6C6