Full_Name: Tim Stewart Version: 2.4.x OS: N/A URL: Submission from: (NULL) (65.200.62.8)

The OpenLDAP documentation at:

http://www.openldap.org/doc/admin24/sasl.html#SASL%20Authentication

describes an example of using a regular expression to describe a set of distinguished names as opposed to using an ldap:// URL. The example is

authzTo: dn.regex=^uid=[^,]*,dc=example,dc=com$

which will produce a syntax error. Instead, the example should read like

authzTo: dn.regex:^uid=[^,]*,dc=example,dc=com$

(the first `=' is replaced with `:') which is accepted by the server.