Re: question about ACL's

[Adam Williams <awilliam@whitemice.org>]

>Hi, all!
>Lets suppose, that I have static groups(for example,
>groupofuniquenames) with attribute 'owner', in which
>listed cn of other static group.
>dn: cn=group1,ou=groups,dc=root
>objectclass: groupofuniquenames
>uniquemeber: uid=u1,ou=people,dc=root
>uniquemember: uid=u45, ou=people,dc=root
>...
>owner: cn=role1,ou=roles,dc=root
>Is this possible to write ACL rule with current openldap , which will
>give right to change attributes of users, who are members of group
>to managers of that group(users, who are members of 'owner' group)?

Certainly.  Look at the dnattr access directive.