Re: Question on '11.3.3.1. Notes on Proxy Authorization Rules'

["Pierangelo Masarati" <ando@sys-net.it>]

> "11.3.3.1. Notes on Proxy Authorization Rules"
> <http://www.openldap.org/doc/admin23/sasl.html#SASL%20Proxy%20Authorization>
> notes the following example:
>
>     authzTo: uid=[^,]*,dc=example,dc=com
>
> Shouldn't that be:
>
>     authzTo: dn.regex:uid=[^,]*,dc=example,dc=com

Exactly.  Actually,

    authzTo: dn.regex:^uid=[^,]*,dc=example,dc=com$

would be even better.

p.



Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
---------------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Email:   pierangelo.masarati@sys-net.it
---------------------------------------