[Issue 10065] slapd needs a config option for the ssf of an external security proxy using "proxy protocol v2"

https://bugs.openldap.org/show_bug.cgi?id=10065

--- Comment #19 from Ondřej Kuzník ondra@mistotebe.net --- On Mon, Jun 12, 2023 at 10:52:56PM +0000, openldap-its@openldap.org wrote:

If there was a simple qualification check that was applied to the authid immediately after it was created, and the connection closed immediately if it failed, I would happily do away with the proxy.

Something like

olcAuthzQualifyRegExp: <match> [ACCEPT|REJECT]

This seemed like a much bigger ask at the time. Now I'm not so sure.

If you can rework e.g. olcAuthzRegexp to give you this power, I've seen other people calling for a similar feature. However no ideas yet on my part how to achieve this.