Issue 221 - Access rules behaviour
Summary: Access rules behaviour
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 1999-07-08 02:13 UTC by alfred@mazuma.net.au
Modified: 2014-08-01 21:06 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description alfred@mazuma.net.au 1999-07-08 02:13:25 UTC
Full_Name: Alfred Reynolds
Version: stable
OS: linux
URL: 
Submission from: (NULL) (203.29.91.69)


The access rules must be on one line which leads to very long lines for
complicated rules.

It would be better if each by line could be on a new line by itself, 
like this:

<access directive> ::= access to <what>{NOTE-!!!! NEW LINE CAN BE HERE!!}
     [ by <who> <access> ]+
     <what> ::= * | [ dn=<regex> ] [ filter=<ldapfilter> ]
     [ attrs=<attrlist> ]
     <who> ::= * | self | dn=<regex> | addr=<regex> |
     domain=<regex> | dnattr=<dn attribute>
     <access> ::= [self]none | [self]compare | [self]search
     | [self]read | [self]write

Just a suggestion for a clean config file
Comment 1 Kurt Zeilenga 1999-07-08 03:45:39 UTC
At 02:13 AM 7/8/99 GMT, alfred@mazuma.net.au wrote:
>Full_Name: Alfred Reynolds
>Version: stable
>OS: linux
>URL: 
>Submission from: (NULL) (203.29.91.69)
>
>
>The access rules must be on one line which leads to very long lines for
>complicated rules.

Use continuation lines.... from slapd.conf(5):
	If a line begins with white space, it is considered a con-
       tinuation of the previous line.
Comment 2 Kurt Zeilenga 1999-07-08 04:14:45 UTC
changed notes
changed state Open to Closed
Comment 3 OpenLDAP project 2014-08-01 21:06:08 UTC
requested enhancement already supported