upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-01-18 21:04:45 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

clarify the use of regex and expand in by dn clauses

Browse source
This commit is contained in:
Pierangelo Masarati 2004-06-28 10:22:48 +00:00
parent 372a941334
commit 44e8ffd4fe
1 changed files with 26 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
doc/man/man5/slapd.access.5
View file

@ -261,8 +261,8 @@ the dollar character that is used to indicate match up to the end of
the string must be escaped by a second dollar character, e.g.
.LP
.nf
access to dn.regex="^(.*,)?uid=([^,]+),dc=example,dc=com$"
by dn.regex="^uid=$1,dc=example,dc=com$$" write
access to dn.regex="^(.+,)?uid=([^,]+),dc=[^,]+,dc=com$"
by dn.regex="^uid=$2,dc=[^,]+,dc=com$$" write
.fi
.LP
The style qualifier
@ -275,6 +275,30 @@ even if
.B dnstyle
is not
.BR regex .
Note that the
.I regex
dnstyle in the above example may be of use only if the
.B by
clause needs to be a regex; otherwise, if the
value of the second (from the right)
.I dc=
portion of the DN in the above example were fixed, the form
.LP
.nf
access to dn.regex="^(.+,)?uid=([^,]+),dc=example,dc=com$"
by dn.exact,expand="uid=$2,dc=example,dc=com" write
.fi
.LP
could be used; if it had to match the value in the
.B what
clause, the form
.LP
.nf
access to dn.regex="^(.+,)?uid=([^,]+),dc=([^,]+),dc=com$"
by dn.exact,expand="uid=$2,dc=$3,dc=com" write
.fi
.LP
could be used.
.LP
It is perfectly useless to give any access privileges to a DN
that exactly matches the