[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: acl again



> 
> Hi there,
> 
> ok, the main wattles about regex i check, but why does this rule dont
> work?
> 
> ---
> access to dn="(dc=[^,]+,)*(dc=[^,]+)$"
> 	by group/organizationalRole/roleOccupant="cn=Domain Administrator, ou=Roles, $1 $2" write

Before going into details, remember that ACLs and significantly regexes
operate on NORMALIZED DNs, so you'd write:


access to dn="(dc=[^,]+,)*(dc=[^,]+)$"
    by group/organizationalRole/roleOccupant="cn=Domain Administrator,ou=Roles,$1$2" write


without extra intervening spaces.

Pierangelo.