Am Sat, 29 Jun 2013 19:49:08 +0200 schrieb Ole ole@free.de:
access to dn.regex=".*ou=([^,]+),ou=mail,dc=example,dc=tld$" by dn.onelevel,expand="ou=admins,ou=$1,ou=mail,dc=example,dc=tld" write by * break
Oh sorry, I have to correct this. It is more secure to use:
access to dn.regex="^(.+,)?ou=([^,]+),ou=mail,dc=example,dc=tld$" by dn.onelevel,expand="ou=admins,ou=$1,ou=mail,dc=example,dc=tld" write by * break
please see [1] for explanation.
Regards, Ole