Besides the obvious workaround, i.e. split the rule into two ACLs, one with the val.regex and another without, I am not sure that I understand how the other special controls (break, continue) can help with this case. Am I missing sth?
On Tue, Oct 14, 2014 at 6:19 PM, Aaron Richton richton@nbcs.rutgers.edu wrote:
On Tue, 14 Oct 2014, Pierangelo Masarati wrote:
attrs=entry,objectClass val.regex="objvalue1|objvalue2",attr1,attr2
Sorry, I involuntarily hit "send" too soon. You can find this bit of info in slapd.access(5):
Using the form attrs=<attr> val[/matchingRule][.<attrstyle>]=<attrval> specifies access to a particular value of a single attribute. In this case, only a single attribute type may be given.
I do feel it's worth pointing out that, while you're reading that man page, the <control> field may prove particularly useful to apply multiple clauses to your (presumably single) <what> scope.