Am Sat, 29 Jun 2013 19:49:08 +0200
schrieb Ole <ole@free.de>:
> access to dn.regex=".*ou=([^,]+),ou=mail,dc=example,dc=tld$"
> by dn.onelevel,expand="ou=admins,ou=$1,ou=mail,dc=example,dc=tld" write
> by * break
Oh sorry, I have to correct this. It is more secure to use:
access to dn.regex="^(.+,)?ou=([^,]+),ou=mail,dc=example,dc=tld$"
by dn.onelevel,expand="ou=admins,ou=$1,ou=mail,dc=example,dc=tld" write
by * break
please see [1] for explanation.
Regards,
Ole
Attachment:
signature.asc
Description: PGP signature