Fabrice Eudes wrote:

Pierangelo Masarati a écrit :

...

[please do not cross-post]

sorry.

I mean: keep postings on the same list they started (and they belong to). Do not assume I subscribed to any list you did.

...

Did you re-index after changing the index configuration in slapd.conf(5)? See slapindex(8) for details.

yes.

I change a bit the "set" clause using "(employeeType=foo)" instead of "(groupesTravail=1200)" and I have the same behavior:

...

index employeeType eq

makes the set clause fails (even after reindexing).

without the index, access are ok.

more idea(s) ?

Indexing cannot alter the response of the system. So your indexing is not correct for some reason. I suggest you first work this issue out by running searches without any ACL. Then go back to ACL design.

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati@sys-net.it ---------------------------------------