[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: "Hide" certain DNs

To: "Andrew Cobaugh" <phalenor@gmail.com>
Subject: Re: "Hide" certain DNs
From: Hallvard B Furuseth <h.b.furuseth@usit.uio.no>
Date: Tue, 13 May 2008 22:25:33 +0200
Cc: openldap-software@openldap.org
In-reply-to: <1b8d56200805130921j3cc42814i4ed3ced8f548ce9d@mail.gmail.com>
References: <1b8d56200805130921j3cc42814i4ed3ced8f548ce9d@mail.gmail.com>

Andrew Cobaugh writes:
> I have tried something like this:
> access to dn.base="cn=psu.facstaff,dc=psu,dc=edu"
>     by * none
> This actually ended up preventing other dn's from showing up.

Prevented others from showing up in what kind of searches?  It also
prevents you from using that DN as the base DN of a search.  See
OPERATION REQUIREMENTS in man slapd.access.  If that's not intended,
try 'by * =scxd' instead.  See THE <ACCESS> FIELD in the manpage.
Or omit the 'd' with older OpenLDAP versions.

-- 
Hallvard

References:
- "Hide" certain DNs
  - From: "Andrew Cobaugh" <phalenor@gmail.com>

Prev by Date: Re: searching for attributes containing eg. german umlauts
Next by Date: Re: Using syncrepl in a 2.2 master
Index(es):
- Chronological
- Thread