Re: ACL with group???

[Gémes Géza <geza@kzsdabas.sulinet.hu>]

Aaron Richton írta:
> In the tests directory there are a few examples such as...
>
> data/slapd-acl.conf:
> by group/groupOfUniqueNames/uniqueMember.exact="cn=ITD
> Staff,ou=Groups,dc=example,dc=com" write
>
> testdata/slapd-idassert.conf:
> by group.exact="cn=Authorizable,ou=Groups,o=Esempio,c=IT" read
>
> You can see these in action with the ACL or idassert tests (e.g.
> "./run test006" in the tests directory); look in the testrun directory
> for output.
>
> On Mon, 3 Dec 2007, Gémes Géza wrote:
>
>> Hi,
>>
>> Sorry if it sounds a newbie question/problem, but:
>> Could anybody send me a working example of how can I use an ACL
>> containing a by group part, I'we found a few examples on the net but a
>> part of it rendered any of the by lines which followed the group one
>> ignored, others have crashed slapd immediately on startup.
>> (My slapd is version 2.3.38 and I stil use slapd.conf file based
>> configuration)
>>
>> Thanks in advance
>>
>> Geza Gemes
>>
Thank you to all of you for your answers!

I should have think about the second example. Unfortunately I was trying
to make something similar to the first one working, with the slapd
crashing at startup. My entry crashing  slapd was:
by group/posixGroup/memberUid.exact="cn=..." write
maybe my fault was thinking that I could use the memberUid optional
attribute of the posixGroup objectclass (from the nis.schema).

Thank you again!

Geza Gemes