olcAccess with combined "by who" condition
- First Post
- Replies
- Stats
-
Go to
- ----- 2022 -----
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
Hello,
Is it possible to combine olcAccess "by who" condition for DN and IP
address, that both conditions must by true? Something like:
to dn.subtree="ou=test,dc=domain,dc=com"
by dn="uid=someuser,ou=users,dc=domain,dc=com" & peername.ip=10.10.10.10
read
So, it should be possible to read the subtree for the user only from the
specific IP address.
I tried also use "set=(...)" but without success.
Any chance to do that?
Attachments:
- attachment.htm (text/html — 612 bytes)
--On Monday, October 05, 2015 12:02 PM +0200 rss ln <russline(a)gmail.com>
wrote:
Hello,
Is it possible to combine olcAccess "by who" condition for DN and IP
address, that both conditions must by true? Something like:
to dn.subtree="ou=test,dc=domain,dc=com"
by dn="uid=someuser,ou=users,dc=domain,dc=com" & peername.ip=10.10.10.10
read
So, it should be possible to read the subtree for the user only from the
specific IP address.
I tried also use "set=(...)" but without success.
Any chance to do that?
It is already noted in the slapd.access(5) man page that you can have
multiple requirements in the WHO clause. I.e., what you're asking for is
already implemented.
Try
by dn.exact="..." peername.ip=xxx read
--Quanah
--
Quanah Gibson-Mount
Platform Architect
Zimbra, Inc.
--------------------
Zimbra :: the leader in open source messaging and collaboration
2501
days inactive
2501
days old
openldap-technical@openldap.org
1 comments
2 participants
tags (0)
participants (2)
-
Quanah Gibson-Mount -
rss ln