----- ando@sys-net.it wrote:

ghenry@OpenLDAP.org wrote:

...

Too tired today :-( For some reason I was talking about

slapo-unique, as I'm

...

writing that up just now.

Just to avoid (or increase :) confusion when you'll be back from relax, I don't recall working at slapo-unique recently. AFAIK, the old and the new config statements live together in perfect harmony, although unique_uri is preferable as it is more expressive.

OK, thanks.

I have added a restrict=<uri> parameter to slapo-constraint, which allows to optionally restrict the entries the constraint would apply to. I have also allowed the <attr> to actually be an attribute list, in case one needs to apply the same constraint to more than one. Finally, the

"set" type is now available. It uses the ACL sets' syntax, which, AFAIK, is still undocumented.

Again, thanks. Sets have been documentated for quite some time now:

http://www.openldap.org/doc/admin24/access-control.html#Sets%20-%20Granting%...