"11.3.3.1. Notes on Proxy Authorization Rules" http://www.openldap.org/doc/admin23/sasl.html#SASL%20Proxy%20Authorization notes the following example:
authzTo: uid=[^,]*,dc=example,dc=com
Shouldn't that be:
authzTo: dn.regex:uid=[^,]*,dc=example,dc=com
p@rick
"11.3.3.1. Notes on Proxy Authorization Rules" http://www.openldap.org/doc/admin23/sasl.html#SASL%20Proxy%20Authorization notes the following example:
authzTo: uid=[^,]*,dc=example,dc=comShouldn't that be:
authzTo: dn.regex:uid=[^,]*,dc=example,dc=com
Exactly. Actually,
authzTo: dn.regex:^uid=[^,]*,dc=example,dc=com$
would be even better.
p.
Ing. Pierangelo Masarati OpenLDAP Core Team
SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati@sys-net.it ---------------------------------------
openldap-software@openldap.org
-
Patrick Ben Koetter -
Pierangelo Masarati