Re: Auth access for search-based mappings?

Quoting Jaap Winius jwinius@umrk.nl:

authz-regexp uid=([^,]*),cn=example.com,cn=gssapi,cn=auth ldap:///dc=example,dc=com??sub? (&(|(entryDN:dnSubtree:=ou=eng,dc=example,dc=com) (entryDN:dnSubtree:=ou=bio,dc=example,dc=com)) (uid=$1)(objectclass=person))

Unfortunately, this doesn't work at all. ...

But this does work:

authz-regexp uid=([^,]*),cn=example.com,cn=gssapi,cn=auth ldap:///dc=example,dc=com??sub? (&(|(entryDN:dnSubtreeMatch:=ou=eng,dc=example,dc=com) (entryDN:dnSubtreeMatch:=ou=bio,dc=example,dc=com)) (uid=$1)(objectclass=person))

I found what I needed to know on the man page for slapcat; first example.

Cheers,

Jaap