Re: Access list - limiting access to attribute

[Hallvard B Furuseth <h.b.furuseth@usit.uio.no>]

Lukas Kubin writes:
> Btw. I have one more question: What is "TRUE filter extension" you 
> mentioned?

That the filter "(&)" is accepted and evalutates to TRUE - i.e. it
matches everything.  Also, the filter "(|)" evaluates to FALSE.
So if you use these, you don't need to grant access to objectClass.
But since it is not part of the LDAP standard, not all servers will
support it.

See openldap-*/doc/drafts/draft-zeilenga-ldap-t-f-xx.txt.

-- 
Hallvard