On Tue, May 5, 2009 at 3:13 PM, Wolfgang Lorenz
<wl-chmw@gmx.de> wrote:
Thank you,
I've found a way to achieve exactly what I wanted:
# self may write subentries no one else may read...
access to dn.regex="^(.+,)+uid=([^,]+),ou=people,dc=example,dc=com$"
by dn.regex="^uid=$2,ou=people,dc=example,dc=com$$" write
Where possible I would use the self.level{-1} syntax in preference of regexes since it is more descriptive. It also doesn't depend on the stability and performance of the OS regex libraries (which use a lot of malloc/frees).