On Tue, May 5, 2009 at 3:13 PM, Wolfgang Lorenz <wl-chmw@gmx.de> wrote:
Thank you,

I've found a way to achieve exactly what I wanted:

# self may write subentries no one else may read...
access to dn.regex="^(.+,)+uid=([^,]+),ou=people,dc=example,dc=com$"
       by dn.regex="^uid=$2,ou=people,dc=example,dc=com$$" write

Where possible I would use the self.level{-1} syntax in preference of regexes since it is more descriptive.  It also doesn't depend on the stability and performance of the OS regex libraries (which use a lot of malloc/frees).

--
Thanks,
Sean Burford