Pierangelo Masarati ando@sys-net.it wrote:
Your fault? I see code for expansion in place (although I didn't check whether it works as intended).
Indeed it seems I forgot one bit, in servers/slapd/acl.c:
if ( a->acl_attrval_style == ACL_STYLE_REGEX ) { Debug( LDAP_DEBUG_ACL, "acl_get: valpat %s\n", a->acl_attrval.bv_val, 0, 0 ); if ( regexec( &a->acl_attrval_re, val->bv_val, 0, NULL, 0 ) )
This regexec does not collect matches, I susepct this is the problem
with -d acl you get something.
Thanks. And -d acl,trace is even better, to get submatches expantion.