> Howard Chu a écrit :
> Unfortunately, it's currently heavily dependant on one of our customer's
> specific schema extensions and data tree structure. The ACLs in use
> implement a lot of the logic specific to their environment, therefore I
> can't send them as is.
> However, I will see if I can "translate" some of the more complicated
> ACLs (with sets) to perform on a simple data set for inclusion in the
> test suite.
> Could some examples such as these also fit your documentation request
> for sets and their applications ? Assuming this is the case, I will
> try and provide at least a subset of our test set soon.
>  http://www.openldap.org/lists/openldap-software/200709/msg00310.html
Let me state first that right now I believe sets do not belong to
slapd(8); they should rather move into a module, under the dynacl
umbrella. And, as such, they should be documented separately from
slapd.access(5), mostly because having them in slapd.access(5) would sort
of encourage unexperienced people into (ab-)using them.
hints, scenarios, case studies and so), as they probably best know what
one can gain from their use. Otherwise, a bare description of the syntax,
although necessary, would hardly be useful to most of the users.
Agreed. Once decided, we can discuss where they would fit in the Admin
OpenLDAP Engineering Team.
Community developed LDAP software.