Re: Setting limits on an ou, only

[Andreas Hasenack <ahasenack@terra.com.br>]

On Thu, Aug 31, 2006 at 07:47:32PM +0200, Pierangelo Masarati wrote:
> Quanah Gibson-Mount wrote:
> >>Sure, I can use that to set a limit for a user but this application 
> >>needs
> >>to bind anonymously (or the equivalent of anonymous, since the
> >>credentials would have to be public).
> >>
> >>I couldn't find anything in the limits directive that would let me
> >>specify a part of the directory to set the limit on. Something like:
> >>When searching the directory, return only 1 result.
> >>Unless searching ou=people, then return all results.
> There's no such possibility, since it makes little sense.  The only 
> solution I see, since limits are per-database, consists in putting that 
> subtree into a separate database, and glue it together to the rest using 
> the "subordinate" directive.  As an alternative, I suggest you use the 

And the glue overlay potentially brings in other problems, like
replication issues, password policy interaction and probably others I'm
not aware of. I would only use it where *really* needed.