Re: <attrlist> syntax in ACLs

[Pierangelo Masarati <pierangelo.masarati@polimi.it>]

On 10/14/2014 09:03 AM, Nikos Voutsinas wrote:
> Hi all,
>
> Although I suspect what the answer would be, I thought It might be a
> good idea to confirm with the list.
>
> Is the following <attrlist> clause in OpenLdap's ACLs syntax valid;
>
> <attr1> [val[.<basic-style>]=<regex>],<attr2>
>
> e.g.
> to dn.subtree="ou=People,dc=foo,dc=com"
>   attrs=entry,objectClass val.regex="objvalue1|objvalue2",attr1,attr2
>   by <who> <what>

No.  When "val=..." is used, only one attr must appear in the list.

p.


--
Pierangelo Masarati
Associate Professor
Dipartimento di Scienze e Tecnologie Aerospaziali
Politecnico di Milano