Re: ACL's for SASL compat.

[Marc Heckmann <heckmann@hbesoftware.com>]

On Tue, Oct 10, 2000 at 08:30:08AM -0700, Kurt D. Zeilenga wrote:
> At 11:26 AM 10/10/00 -0400, Marc Heckmann wrote:
> >ok, how do I enable _all_ logging I have tried but haven't figured out how to get it all. 
> 
> slapd -d -1 ....
> 
ok,

	found it, it needs do have a double backslash: "by dn="uid=testuser\\+realm=schoenberg" write" for it to work.
This gives the following,

=> acl_mask: access to entry "uid=testuser,portalId=ADBE,ou=People,o=RedGorilla", attr "sn" requested
=> acl_mask: to value by "UID=TESTUSER+REALM=SCHOENBERG", (=n) 
<= check a_dn_pat: uid=testuser\+realm=schoenberg
=> string_expand: pattern:  uid=testuser\+realm=schoenberg
=> string_expand: expanded: uid=testuser\+realm=schoenberg
=> regex_matches: string:   UID=TESTUSER+REALM=SCHOENBERG
=> regex_matches: rc: 0 matches

with a single backslash, we get,

=> acl_mask: access to entry "uid=testuser,portalId=ADBE,ou=People,o=RedGorilla", attr "sn" requested
=> acl_mask: to value by "UID=TESTUSER+REALM=SCHOENBERG", (=n) 
<= check a_dn_pat: uid=testuser+realm=schoenberg
=> string_expand: pattern:  uid=testuser+realm=schoenberg
=> string_expand: expanded: uid=testuser+realm=schoenberg
=> regex_matches: string:   UID=TESTUSER+REALM=SCHOENBERG
=> regex_matches: rc: 1 no matches

	So the question is what is the intended behaviour?
-- 
	Marc Heckmann  -  Network Operations  
        HBE Software/Opendesk.Com
        heckmann@hbesoftware.com www.hbesoftware.com
        heckmann@opendesk.com www.opendesk.com
        Tel. (514) 876-7881 ext. 219
        Fax. (514) 876-9223