[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ACIs problem when allowing "read" but restricting "updates" in specific entries

To: Antonio Alonso <antonio.alonso@ericsson.com>
Subject: Re: ACIs problem when allowing "read" but restricting "updates" in specific entries
From: Michael Ströder <michael@stroeder.com>
Date: Fri, 14 Mar 2008 13:41:03 +0100
Cc: openldap-software@openldap.org
In-reply-to: <C2DCE841B201E7468E0DFAB1651A851C01638B99@eesmdmw020.eemea.ericsson.se>
References: <C2DCE841B201E7468E0DFAB1651A851C01638B99@eesmdmw020.eemea.ericsson.se>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.12) Gecko/20080201 SeaMonkey/1.1.8

Antonio Alonso wrote:

I need some help with a pair of ACIs I have prepared (using openldap 2.4.7 in a SuSE9 server)

Note that ACI support does not get this much attention by the developers like ACLs in slapd.conf. So I'd rather recommend to do want you want with ACLs. This definitely is possible. See examples for regex-based ACLs in the FAQ-O-MATIC:

http://www.openldap.org/faq/data/cache/973.html

Ciao, Michael.

Follow-Ups:
- Re: ACIs problem when allowing "read" but restricting "updates" in specific entries
  - From: Quanah Gibson-Mount <quanah@zimbra.com>

References:
- ACIs problem when allowing "read" but restricting "updates" in specific entries
  - From: "Antonio Alonso" <antonio.alonso@ericsson.com>

Prev by Date: Re: syncrepl not syncing [ CSN older or equal to ctx ]
Next by Date: slurpd does not sync master and slave
Index(es):
- Chronological
- Thread