diff --git a/tests/data/slapd-acl.conf b/tests/data/slapd-acl.conf index a472bbda31..9356ab9b4f 100644 --- a/tests/data/slapd-acl.conf +++ b/tests/data/slapd-acl.conf @@ -24,7 +24,7 @@ pidfile ./testrun/slapd.1.pid argsfile ./testrun/slapd.1.args # global ACLs -access to dn.base="" attr=objectClass by users read +access to dn.exact="" attr=objectClass by users read access to * by * read #mod#modulepath ../servers/slapd/back-@BACKEND@/ @@ -49,8 +49,9 @@ rootpw secret # normal installations should protect root dse, cn=monitor, cn=subschema # +# these are equivalent access to dn="" by * read -access to dn.base="" by * read +access to dn.exact="" by * read access to attr=objectclass by * =rsc stop @@ -73,7 +74,7 @@ access to attr=member,uniquemember filter="(mail=*com)" by * read access to filter="(&(objectclass=groupofnames)(objectClass=groupofuniquenames))" - by dn.base="cn=Bjorn Jensen,ou=Information Technology Division,ou=People,dc=example,dc=com" =sc continue + by dn.exact="cn=Bjorn Jensen,ou=Information Technology Division,ou=People,dc=example,dc=com" =sc continue by dn.regex="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,dc=example,dc=com$" +rw stop by * break