Am Dienstag 02 November 2010, 18:03:56 schrieb Ralf Haferkamp:
Am Dienstag 02 November 2010, 16:57:38 schrieb Benjamin Griese:
[..]
Something like this should work:
access to dn.base="" attrs=supportedControl val/objectIdentifierMatch=1.2.840.113556.1.4.473 by * none access to dn.base="" attrs=supportedControl val/objectIdentifierMatch=2.16.840.1.113730.3.4.9 by * none
I just found out however that there seems to be a bug in the ACL code when the above ACL appear as the first ACL in the configuration :(. I am still trying to track down that problem.
FYI, this is now ITS#6693.
So please make sure to have another ACL before them (one that doesn't apply to the "supportedControl" Attribute of course).
Ralf