Re: ACL for PGP - WAS:Re: Storing Special German Characters in OpenLDAP as PGP -Directory

[Alejandra Moreno <alejandra.moreno@atrete.ch>]

Hi!

But with the last line aren't you giving permission to everybody to write
on the whole tree???? I wouldn't like that!
You are right, NAI's integration seems really poor!

Alejandra

At 17:32 04.01.2002 +0100, you wrote:
> Hi!
>
> This works:
>      access to dn=".*,o=PGP
> Keys,dc=atrete,dc=ch" by * write
>      access to dn=".*,dc=atrete,dc=ch" by *
> write
>      access to dn=".*,dc=ch" by * 
> read
>      access to * by * write
>
> The first lines gives write permission to everything _below_ 
> "o=PGP
> Keys,dc=atrete,dc=ch",
> but why tries PGP to write on level "*,dc=atrete,dc=ch"
> ?
>
> The ldap integration for PGP by NAI seems to be poorly programmed.
> :-(
>
> Joachim
>
>
>
>
>
> Alejandra Moreno <alejandra.moreno@atrete.ch> am 04.01.2002
> 17:13:02
>
>
> An:   Joachim Koch/Login/DE/MLP@MLP,
> openldap-software@OpenLDAP.org
> Kopie:
>
> Thema:    Re: ACL for PGP - WAS:Re: Storing Special German
> Characters in
>       OpenLDAP as PGP -Directory  [Virus
> checked (@MLP)]  [Virus checked]
>
>
>
> Hi!
>
> If you try :
>
> access to dn=".*,o=PGP Keys,dc=atrete,dc=ch" by * write
> access to dn=".*,dc=ch" by * read
> access to * by * read
>
> to send a key you get the error: no write access to parent
> But don't I give write access to parent with the first line? This is
> crazy!!!
>
> Alejandra
>
>
> At 16:56 04.01.2002 +0100, you wrote:
> >Hi!
> >
> >try this, if you only want to search for keys:
> >access to dn=".*,o=PGP Keys,dc=atrete,dc=ch" by *
> write
> >access to dn=".*,dc=ch" by * read
> >---> access to * by * read  <----
> >
> >
> >The third line has to be
> >      access to * by * write !!!
> >if you want to send keys to the server.
> >
> >I'm wondering why the third line is neccesary. What does the
> ##$#-Client
> >try and
> >where?
> >
> >Greets,
> >Joachim
> >
> >
> >
> >
> >
> >Alejandra Moreno <alejandra.moreno@atrete.ch> am 04.01.2002
> 16:12:39
> >
> >
> >An:   openldap-software@OpenLDAP.org
> >Kopie:     (Blindkopie: Joachim
> Koch/Login/DE/MLP)
> >
> >Thema:    Re: Storing Special German Characters in
> OpenLDAP as
> >PGP   -Directory
> >       [Virus checked (@MLP)] 
> [Virus checked]
> >
> >
> >
> >Hi!
> >
> >I also tried that, and still didn't work. It's driving me
> nuts!!!!
> >
> >At 15:35 04.01.2002 +0100, you wrote:
> > >quote Alejandra Moreno (4.1.2002):
> > >
> > > > If you get some feed back from NAI, just tell me!
> > > > You were write about the access permission, the following
> syntax wont
> > work:
> > > >
> > > > access to dn=".*,dc=ch" by * read
> > > > access to dn=".*,o=PGP Keys,dc=atrete,dc=ch" by
> * write
> > >
> > >switch the ACLs to:
> > >access to dn=".*,o=PGP Keys,dc=atrete,dc=ch" by *
> write
> > >access to dn=".*,dc=ch" by * read
> > >
> > >the first matching ACL makes the job.
> > >
> > >
> > >    Sebastian Dietzold
> > >
> > >--
> > >Sebastian Dietzold
> > >Content Management / Directory Services
> > >Institute for Medical Informatics,
> > >Statistics and Epidemiology (IMISE)
> > >University of Leipzig
> > >Liebigstr. 27
> > >04103 Leipzig
> > >Phone: +49 341 97 161 14
> > >Fax:   +49 341 97 161 30
> >
> >______________________________________________________________________
> >Alejandra Moreno Espinar
> >at rete ag
> >
> >mailto:alejandra.moreno@atrete.ch,
> http://www.atrete.ch
> >snail mail: Oberdorfstrasse 2, P.O. Box 674, 8024 Zurich,
> Switzerland
> >voice: +41-1-266 55 55, direct: +41-1-266 55 91, fax: +41-1-266 55
> 88
> >_____________________________________________________________________
> >
> >
> >______________________________________________________________________
> >Alejandra Moreno Espinar
> >at rete ag
> >
> >mailto:alejandra.moreno@atrete.ch,
> http://www.atrete.ch
> >snail mail: Oberdorfstrasse 2, P.O. Box 674, 8024 Zurich,
> Switzerland
> >voice: +41-1-266 55 55, direct: +41-1-266 55 91, fax: +41-1-266 55
> 88
> >_____________________________________________________________________
>
> ______________________________________________________________________
> Alejandra Moreno Espinar
> at rete ag
>
> mailto:alejandra.moreno@atrete.ch,
> http://www.atrete.ch
> snail mail: Oberdorfstrasse 2, P.O. Box 674, 8024 Zurich,
> Switzerland
> voice: +41-1-266 55 55, direct: +41-1-266 55 91, fax: +41-1-266 55
> 88
> _____________________________________________________________________

______________________________________________________________________
Alejandra Moreno Espinar
at rete ag

mailto:alejandra.moreno@atrete.ch, http://www.atrete.ch
snail mail: Oberdorfstrasse 2, P.O. Box 674, 8024 Zurich, Switzerland
voice: +41-1-266 55 55, direct: +41-1-266 55 91, fax: +41-1-266 55 88
_____________________________________________________________________