[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: acl filter problem

On 8/5/2012 12:32 ÎÎ, Dorit wrote:


I have now tried adding another acl in the middle as follows:

access to dn.subtree="ou=abc,dc=aa,dc=bb,dc=cc" attrs="entry"
by dn="uid=Admin,ou=Operators,dc=aa,dc=bb,dc=cc" search



Try using:

access to dn.subtree="ou=abc,dc=aa,dc=bb,dc=cc" attrs="entry"
  by dn="uid=Admin,ou=Operators,dc=aa,dc=bb,dc=cc" read
  by * break

and then:

access to dn.subtree="ou=abc,dc=aa,dc=bb,dc=cc" filter="(host=csa)"
by dn="uid=Admin,ou=Operators,dc=aa,dc=bb,dc=cc" read


As far as I understand, the
attrs="entry"
is implicit.


No, it's not.

Nick