[Date Prev][Date Next] [Chronological] [Thread] [Top]

ACLparse turns comments into empty lines (ITS#2793)



Full_Name: Ace SU-ares 
Version: 2.1.22
OS: Linux ?
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (216.152.170.224)


Format of ACL (feature request)
Van:Ace Suares <ace@suares.nl>
Aan:openldap-software@OpenLDAP.org

Hi,

Just a loose thought or two

It seems the format of ther ACL's is rather restrictive. As far as I noticed, 
the follwing stuff happens:


EXAMPLE 1:

access to *
by * none

ERROR 1:
/etc/ldap/qwidoACL/qwido.acl.global: line 300: warning: no by clause(s) 
specified in access line
/etc/ldap/qwidoACL/qwido.acl.global: line 301: unknown directive "by" outside 
backend info and database definitions (ignored)


EXAMPLE 2
access to *
# comment
[tab]by * none

ERROR 2:
/etc/ldap/qwidoACL/qwido.acl.global: line 300: warning: no by clause(s) 
specified in access lines

EXAMPLE 3
[tab]access to *
[tab][tab]by * none

ERROR 3:
No error message, but the entire ACL is ignored.

These examples show that it becomes really difficult to indent the ACL's in 
such a way that they are better readable, or insert comments between ACL's 
for clarity.

Could these restrictions be loosened, so that at least comment lines are just 
ignored (and not translated to 'empty' lines), and that identation might be 
less of a problem ?

_Ace