Re: ACL problem in OpenLDAP

["Gavin Henry" <ghenry@suretecsystems.com>]

<quote who="JOYDEEP">
> Dear list,
>
> I am really fade up and need your kind guidance to solve the problem.
>
> I have OpenLDAP based addressbook. Users are located under
> ou=users,virtualDomain=kolkata.opendingo.com,dc=suse,dc=ldap
>
> basedn of personal adresbook
> ou=personal,ou=contacts,ou=contacts,virtualDomain=kolkata.opendingo.com,dc=suse,dc=ldap
>
> I need such an ACL so that only owner can read his addressbook.
>
> The ACL for this is
>
> access to
> dn.regex="cn=([^,]+),ou=personal,ou=contacts,ou=contacts,virtualDomain=([^,]+),dc=suse,dc=ldap$"
>   by dn.regex="uid=([^,]+),ou=users,virtualDomain=$2,dc=suse,dc=ldap"
> read
>   by users none
>
> but all the users can see others personal addresbook. Kindly suggest
> where I have done
> mistake. thanks for your kind support

Did you read http://www.openldap.org/faq/data/cache/1005.html

Gavin.

>
>