[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: about ACL and err=50



No way :(  I have tried the following ACL:


-----
index   cn,sn,uid       pres,eq,sub
index   objectClass     eq
lastmod on

access to dn=".*,ou=Roaming,dc=UPCT,dc=es"
    by dnattr=owner write

access to attr=userpassword
    by self write
    by * none         

access to *
    by self write    
------


And the problem still remains (err=50 in MOD operation):
------
May 25 13:08:47 pcejaen slapd[12322]: conn=0 op=15 SRCH
base="NSLIELEMENTTYPE=COOKIES,NSLIPROFILENAME=ENRIC
JAEN,OU=ROAMING,DC=UPCT,DC=ES" scope=0 filter="(objectclass=*)"
May 25 13:08:47 pcejaen slapd[12322]: conn=0 op=15 RESULT err=0 tag=101
nentries=1
May 25 13:08:47 pcejaen slapd[12323]: conn=0 op=17 MOD
dn="NSLIELEMENTTYPE=BOOKMARKS,NSLIPROFILENAME=ENRIC
JAEN,OU=ROAMING,DC=UPCT,DC=ES"                                      
May 25 13:08:47 pcejaen slapd[12323]: conn=0 op=17 RESULT err=50 tag=103
nentries=0   
---------


However, it works if I use this crude ACL:

-------
access to dn=".*,ou=Roaming,dc=UPCT,dc=es"
    by * write
-------

.. but of course I don't want everyone can write on my entries ;)


If you need more information please let me know..

Regards,

  -Enric