Re: ACLs based on attributes?

Jaap Winius jwinius@umrk.nl writes:

Quoting Quanah Gibson-Mount quanah@zimbra.com:

...

Blah, I was thinking this in the wrong direction. Sets are likely what you need. I think the syntax would be more

by set.exact="user/title=telephonemanager" write

This looks great, but I've tested it (with slapd v2.4.11) and unfortunately it doesn't want to work. Could there any special requirements that might be necessary before sets can be used?

this rule should do the trick: access to dn.regex="cn=([^,]+),ou=whatsoever$" attrs=telephoneNumber by set="user/title & [telephoneManager]" write

-Dieter