In 2005 this was not possible, has this changed?

access to dn.children="ou=users,o=mydomain.com"

filter=(groupname=(.+))

by group.expand="cn=$1,ou=groups,o=mydomain.com" write

[1] https://www.openldap.org/lists/openldap-software/200501/msg00322.html

-----Original Message----- To: openldap-technical Subject: Acl with variable in filter

Is it possible to have a variable VAR in an acl filter?

Something like this:

to dn="sendmailMTAKey=test@bbbbb.com,ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc= aaaaa,dc=local" filter="(sendmailMTAMapValue=VAR1) by ssf=64 dn.exact="uid=VAR1,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=local"

read