enhance ACL documentation (ITS#3181)

[John.Kloss@jhmi.edu]

Full_Name: John Kloss
Version: 2.2.12
OS: Linux 2.4.+ and Solaris 9
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (162.129.236.40)


In regards to ITS# 3165, Kurt D. Zeilenga suggests that complex ACL examples
should only be displayed in the current OpenLDAP Administrators Guide after
carefully building them up through previous, simpler examples.

I would like to suggest that the ACL section of the OpenLDAP Administrators
Guide be enhanced in that manner:  simple definitions followed by simple
examples, moving on to more complex definitions and examples with a possiblity
of application specific examples given at or near the end.  The ACL section
could be made a chapter in it's own right, much like the sections on TLS and
SASL.

ACL examples are, of course, already provided in the current OpenLDAP
Administrators Guide, but I feel this section could be enhanced with specific
query examples and the resulting ACL applications to such queries with
particular regard to ACLs utilizing groupOfNames, regular expressions, peername,
and filter parameters.
 
I am willing to submit such documentation in whatever format is required (the
guidelines for patch submissions are quite clear, but I was unsure about
documentation update formats).