RE: hiding a naming context

["Ralf Mattes" <rm@mh-freiburg.de>]

Am Dienstag, 19. Mai 2015 17:22 CEST, Craig White <CWhite@skytouchtechnology.com> schrieb:

> -----Original Message-----
> From: Michael Ströder [mailto:michael@stroeder.com]
> Sent: Tuesday, May 19, 2015 1:04 AM
> To: Craig White; openldap-technical@openldap.org
> Subject: Re: hiding a naming context
>
> Craig White wrote:
> > Oh - and I put in just a single value in the ldif...
> >
> > dn: olcDatabase={-1}frontend,cn=config
> > changetype: modify
> > add: olcAccess
> > olcAccess: {0}to dn.exact=""
> >     attrs=namingContext
>
> s/namingContext/namingContexts/
>
> ----
> I see said the blind man - worked - thanks.
>
> Now to determine if that actually hurts anything that I am doing otherwise.

Hmm - maybe I miss the obvious, but wasn't your initial goal "So our programmers want
me to filter out ‘namingContexts: cn=accesslog’ for them (please don’t ask)"?
Won't the above ACL block _all_ namingContexts attributes?

 Cheers, Ralf Mattes

>
> Craig
>
>