On Fri, Jan 17, 2025 at 11:27:01AM +0100, Uwe Sauter wrote:
Am 17.01.25 um 10:52 schrieb Ondřej Kuzník:
presumably you have both IPv4 and IPv6 (or UNIX socket) clients and this attempts to differentiate between the classes/address families?
Hi,
Quote from slapd.access (Debian 12, slapd 2.5.13+dfsg-5):
The special ip style interprets the pattern as <peername>=<ip>[%<mask>][{<n>}], where <ip> and <mask> are dotted digit representations of the IP and the mask, while <n>, delimited by curly brackets, is an optional port. The same applies to IPv6 addresses when the special ipv6 style is used.
End quote.
0.0.0.0%0.0.0.0 is <ipv4>%<subnet mask> equivalent to 0.0.0.0/0 <ipv4>/<prefix length>. Meaning every possible IPv4 address.
Yes, as opposed to every IPv6 address (or UNIX socket)? At least that's pretty much the only thing that jumps out when I read this.
Regards,