[Date Prev][Date Next] [Chronological] [Thread] [Top]

acl, host problem



Hi, I have a simple questions...
in slapd.conf (openldap 1.2.x) I colud use 'by addr' parameter (for
example:by addr=10.10.*.* read) but in the latest versions of opendalp
(2.0.x) I haven't it. Have I use 'by domain' parameter?How can i use it if
i
have some pc that haven't domain?
I have create these ACL:

by domain=.*\.univr\.it read
        by domain=.st2\.students\.univr\.it read
        by domain=.localhost\.localdomain read

In my log I find:

daemon: conn=0 fd=7 connection from IP=127.0.0.1:45981 (IP=0.0.0.0:34049)
accepted
...........
Mar 15 09:49:08 tic slapd[13911]: => string_expand: pattern:  .*.univr.it
Mar 15 09:49:08 tic slapd[13911]: => string_expand: expanded: .*.univr.it
Mar 15 09:49:08 tic slapd[13911]: => regex_matches: string:   unknown
Mar 15 09:49:08 tic slapd[13911]: => regex_matches: rc: 1 no matches
Mar 15 09:49:08 tic slapd[13911]: <= check a_domain_pat:
.st2.students.univr.it
Mar 15 09:49:08 tic slapd[13911]: => string_expand: pattern:
.st2.students.univr.it
Mar 15 09:49:08 tic slapd[13911]: => string_expand: expanded:
.st2.students.univr.it
Mar 15 09:49:08 tic slapd[13911]: => regex_matches: string:   unknown
Mar 15 09:49:08 tic slapd[13911]: => regex_matches: rc: 1 no matches
Mar 15 09:49:08 tic slapd[13911]: <= check a_domain_pat:
.localhost.localdomain
Mar 15 09:49:08 tic slapd[13911]: => string_expand: pattern:
.localhost.localdomain
Mar 15 09:49:08 tic slapd[13911]: => string_expand: expanded:
.localhost.localdomain
Mar 15 09:49:08 tic slapd[13911]: => regex_matches: string:   unknown
Mar 15 09:49:08 tic slapd[13911]: => regex_matches: rc: 1 no matches
Mar 15 09:49:08 tic slapd[13911]: <= check a_domain_pat: .localdomain
Mar 15 09:49:08 tic slapd[13911]: => string_expand: pattern:  .localdomain
Mar 15 09:49:08 tic slapd[13911]: => string_expand: expanded: .localdomain
Mar 15 09:49:08 tic slapd[13911]: => regex_matches: string:   unknown
Mar 15 09:49:08 tic slapd[13911]: => regex_matches: rc: 1 no matches
Mar 15 09:49:08 tic slapd[13911]: <= check a_dn_pat: *
Mar 15 09:49:08 tic slapd[13911]: <= acl_mask: [9] applying none (=n)
(stop)
Mar 15 09:49:08 tic slapd[13911]: <= acl_mask: [9] mask: none (=n)
Mar 15 09:49:08 tic slapd[13911]: => access_allowed: search access denied
by
none (=n)
.........

So, How I can permit to some machine write/read ldap tree?
Thx, Francesco