Re: Stumped on ACL

[Ian Logan <ian@NMSU.Edu>]

You probably want to use the peername clause. Took a look at slapd.access(5)
for the details.


On Wed, Mar 05, 2003 at 12:00:57AM -0600, Timothy H Folks wrote:
> Hello, everyone.
> 
> I start with a basic access control policy like this:
> 
> access to filter=(objectClass=inetOrgPerson)
>     by dn="uid=admin1,dc=example,dc=com" write
>     by dn="uid=admin2,dc=example,dc=com" read
> 
> 
> So far so good. Now is where I start to get lost. I want to allow access 
> from ldapi and then from ldap: in two different ways: without requiring 
> encryption on 127.0.0.1 and requiring StartTLS on the external IP's, Is 
> there a way to do this? I appreciate your help in advance.
> 
> Tim 

-- 
Ian Logan
Information and Communication Technologies
New Mexico State University
Email: ian@nmsu.edu Phone: 505-646-6034 Fax: 505-646-4560