Howard Chu hyc@symas.com wrote:

The slapd.access(5) manpage needs to be updated with this info. Please provide a patch.

That was done when I added the feature. From slapd.acces(5): In addition, the regex style can exploit substring substitution of submatches in the <what> dn.regex clause by using the form $<digit>, with digit ranging from 0 to 9 (where 0 matches the entire string), or the form ${<digit>+}, for submatches higher than 9. Substring substitution from attribute value can be done in using the form ${v<digit>+}