ACL dn.sub vs dn.subtree (ITS#2300)

[bernard.gardner@messagecare.com]

Full_Name: Bernard Gardner
Version: 2.1.12
OS: Linux
URL: ftp://ftp.openldap.org/incoming/bernard-gardner-030205.patch
Submission from: (NULL) (203.102.163.155)


The documentation (slapd.access(5) and acl_usage in servers/slapd/aclparse.c)
describes the use of dn.sub in the <who> and <what> clauses in an ACL. The code
accepts dn.subtree and not dn.sub. This patch changes this to accept dn.sub (but
not dn.subtree) to match the documentation.

It might be worth accepting either form to avoid breaking existing
configurations.