mirror of
https://git.openldap.org/openldap/openldap.git
synced 2025-12-29 19:19:35 -05:00
ITS#2573 dynamic group support
This commit is contained in:
parent
b93a0f45d5
commit
11148522ec
1 changed files with 16 additions and 7 deletions
|
|
@ -221,26 +221,26 @@ The statement
|
|||
.B dnattr=<attrname>
|
||||
means that access is granted to requests whose DN is listed in the
|
||||
entry being accessed under the
|
||||
.B attrname
|
||||
.B <attrname>
|
||||
attribute.
|
||||
.LP
|
||||
The statement
|
||||
.B group=<group>
|
||||
means that access is granted to requests whose DN is listed
|
||||
in the group entry whose DN is given by
|
||||
.BR group .
|
||||
.BR <group> .
|
||||
The optional parameters
|
||||
.B objectclass
|
||||
.B <objectclass>
|
||||
and
|
||||
.B attrname
|
||||
.B <attrname>
|
||||
define the objectClass and the member attributeType of the group entry.
|
||||
The optional style qualifier
|
||||
.B style
|
||||
.B <style>
|
||||
can be
|
||||
.BR regex ,
|
||||
which means that
|
||||
.B pattern
|
||||
will be expanded accorging to regex (7), and
|
||||
.B <group>
|
||||
will be expanded according to regex (7), and
|
||||
.B base
|
||||
or
|
||||
.B exact
|
||||
|
|
@ -248,6 +248,15 @@ or
|
|||
.BR base ),
|
||||
which means that exact match will be used.
|
||||
.LP
|
||||
For static groups, the specified attributeType must have
|
||||
.B DistinguishedName
|
||||
or
|
||||
.B NameAndOptionalUID
|
||||
syntax. For dynamic groups the attributeType must
|
||||
be a subtype of the
|
||||
.B labeledURI
|
||||
attributeType.
|
||||
.LP
|
||||
The statements
|
||||
.BR peername=<peername> ,
|
||||
.BR sockname=<sockname> ,
|
||||
|
|
|
|||
Loading…
Reference in a new issue