Howard Chu a écrit :

Unfortunately, it's currently heavily dependant on one of our customer's specific schema extensions and data tree structure. The ACLs in use implement a lot of the logic specific to their environment, therefore I can't send them as is.

However, I will see if I can "translate" some of the more complicated ACLs (with sets) to perform on a simple data set for inclusion in the test suite.

Could some examples such as these also fit your documentation request for sets and their applications [1]? Assuming this is the case, I will try and provide at least a subset of our test set soon.

Cheers, Jon

[1] http://www.openldap.org/lists/openldap-software/200709/msg00310.html

Let me state first that right now I believe sets do not belong to slapd(8); they should rather move into a module, under the dynacl umbrella. And, as such, they should be documented separately from slapd.access(5), mostly because having them in slapd.access(5) would sort of encourage unexperienced people into (ab-)using them.

Also, I'd like sets' users to document them (especially in terms of useful hints, scenarios, case studies and so), as they probably best know what one can gain from their use. Otherwise, a bare description of the syntax, although necessary, would hardly be useful to most of the users.

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati@sys-net.it ---------------------------------------