11:23 p.m.
On 26 Jan 2016, at 14:34 , julien soula
<julien.soula(a)univ-lille2.fr> wrote:
On Tue, Jan 26, 2016 at 11:43:59AM +0000, BÖSCH Christian wrote:
>
> Jan 26 12:35:46 openldap1 slapd[84283]: => mdb_entry_get: found entry:
"uid=user1,ou=people,o=abc.net"
> Jan 26 12:35:46 openldap1 slapd[84283]: => mdb_entry_get: found entry:
"cn=group,ou=groups,o=abc.net"
are you sure that "uid=user1,ou=people,o=abc.net" is a member of
"cn=group,ou=groups,o=abc.net” ?
yes i am.
to me it seems that filter= following with attrs= (tested with several filters and
attributes) does not work.
if i omit attrs= it works to hide the whole entry. if i use a dn instead of filter i can
use the attrs= to hide a single attribute.
christian
cdt,
--
Julien
<< Vous n'avez rien a dire... Parlons-en! >>
5:41 a.m.
New subject: acl bug?
On 27 Jan 2016, at 09:46 , Michael Ströder
<michael(a)stroeder.com> wrote:
BÖSCH Christian wrote:
> to me it seems that filter= following with attrs= (tested with several
> filters and attributes) does not work.
Sure it works. I make extensive use of all sorts of ACLs in Æ-DIR, especially
filter in <what> clause.
in combination with attrs= ?
on my 2.4.21 server the acl works,
on my 2.4.43 it behaves like described above…
Ciao, Michael.
6:15 a.m.
New subject: acl bug?
BÖSCH Christian wrote:
> On 27 Jan 2016, at 09:46 , Michael Ströder <michael(a)stroeder.com> wrote:
>
> BÖSCH Christian wrote:
>> to me it seems that filter= following with attrs= (tested with several
>> filters and attributes) does not work.
>
> Sure it works. I make extensive use of all sorts of ACLs in Æ-DIR, especially
> filter in <what> clause.
in combination with attrs= ?
Yes.
I'm using almost every possible ACL variant in Æ-DIR (with OpenLDAP 2.4.43).
on my 2.4.21 server the acl works,
on my 2.4.43 it behaves like described above…
Check the difference(s) in your setups.
Ciao, Michael.
2609
days inactive
2609
days old
openldap-technical@openldap.org
3 comments
2 participants
participants (2)
-
BÖSCH Christian -
Michael Ströder