[Date Prev][Date Next] [Chronological] [Thread] [Top]

olcAccess with combined "by who" condition

To: openldap-technical@openldap.org
Subject: olcAccess with combined "by who" condition
From: rss ln <russline@gmail.com>
Date: Mon, 5 Oct 2015 11:02:14 +0200
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=E3UidmL/I92PI3UhVQeGm/vdhpdmzLZIWVlloPJixSM=; b=ta7Ici4opDuh6ikBFSaUzwoN/iIunSF317ys63kjG3XMKXlGbA1C4kGsq5fva1q5VQ Ev2w0Ailg4Zy6iSlyg31wQmJFDuh2/ZPABsmIHMaiqYVsnKfa4avFuRjO0zDGh8NdTVH OMqNv8Ww3J93cIJZuhKwu7rFMHIVPp7gdiLAts14QJ+BE7e+ulN6AsZGrTV7RJ5r03uj KhT9vrCI43XUUff2+3XMnqc0UVOw98MAGtMjcMdsKEKWLlvXgZAoKjnrD2hcecx26LJ/ 0ue9Rfv9Kv9fFFsHN/mhXkaYgUu4nKg+6Qa0+6HB3g0NvzjZw+OgZqCdAYY6OYVQbVXb KtYQ==

Hello,

Is it possible to combine olcAccess "by who" condition for DN and IP address, that both conditions must by true? Something like:

to dn.subtree="ou=test,dc=domain,dc=com"
by dn="uid=someuser,ou=users,dc=domain,dc=com" & peername.ip=10.10.10.10 read

So, it should be possible to read the subtree for the user only from the specific IP address.

I tried also use "set=(...)" but without success.

Any chance to do that?

Follow-Ups:
- Re: olcAccess with combined "by who" condition
  - From: Quanah Gibson-Mount <quanah@zimbra.com>

Prev by Date: Re: Complex multi-master topology
Next by Date: Re: RBAC
Index(es):
- Chronological
- Thread