Re: Regexp in rootdn and set-resolving of monitor attr

Am 01.04.2011 14:09, schrieb Kilian Röhner:

So is it just possible to put into an access-clause something like this?:

access to dn.exact="ou=abc" attrs=children by dn.exact="cn=foo,cn=bar" add

As the manpage states, to add an entry you need 'write' permissions on the parents pseudo-attribute "children" and at least 'add' permissions on the pseudo-attribute "entry" of the entry you want to add itself. Which means you'd need something like this:

access to dn.exact="ou=abc" attrs=children by dn.exact="cn=foo,cn=bar" write

access to dn.sub="ou=abc" attrs=entry by dn.exact="cn=foo,cn=bar" add

Regards, Christian Manal