Re: Help with regexp substring capturing in 'filter' ACL clause

[Victor Danilchenko <danilche@cs.umass.edu>]

On Thu, 16 Sep 2004, Dieter Kluenter wrote:

>http://www.openldap.org/faq/data/cache/452.html
>
>section: Sets in Access Controls
>section: More on sets and how ...

	I appreciate the attempt to help, Dieter, but that FAQ entry
(which I had already perused) doesn't help me. I know how to do regexp
capture in general -- my issue is with doing so within a *filter*.
Filters have parentheses as special characters that signity filter
element grouping, but regexp capture uses parentheses as well. In fact,
it looks like the parentheses inside the filter expression ge treated
literally -- so even if I try to capture a literal word within a filter,
without using the resulting capture in any <who> elements, the lookup
starts failing:

access to filter=(cscfPersonGroupDN=cn=(somegroup),dc=example,dc=com) attr=uidNumber
       by self read
       by dn="cn=somegroup,dc=example,dc=com" read
       by * -w break

	So my question is not how to capture matches from a regexp in
general, but how do I do so for matches inside the filter specification.
Helpful though OpenSSH FAQ is, I have not been able to extract an answer
to that question from it.

-- 
|  Victor  Danilchenko  | Curiosity was framed;     |
| danilche@cs.umass.edu | Ignorance killed the cat. |
|   CSCF   |   5-4231   |              -- Anonymous |