Hans Moser wrote:

Hi!

man slap.access says:

It can have the forms

dn[.<dnstyle>]=<dnpattern>

man slapd.conf "authz-policy" says:

it can take five forms: [...] dn[.<dnstyle>]:<pattern>

Am I wrong, or is this by any cause different? Why ":" here and "=" there?

Traditionally, "access" used "dn=<pattern>", while "authz*" used "dn:<pattern>"; when styles came in, each context preserved the related separator. I don't see a big inconsistency here, since the contexts of application of each configuration syntax are well separated.

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.n.c. Via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ------------------------------------------ Office: +39.02.23998309 Mobile: +39.333.4963172 Email: pierangelo.masarati@sys-net.it ------------------------------------------