Hi
I am trying to build a olcaccess statement and I am wondering how to implement a ipv6 network
Currently I have
'to dn.sub="ou=SUDOers,dc=samad,dc=com,dc=au" '. 'by dn.exact="cn=libnss-ldap,ou=Roles,dc=samad,dc=com,dc=au" read '. 'by dn.exact="cn=libpam-ldap,ou=Roles,dc=samad,dc=com,dc=au" read '. 'by peername.ip=192.168.12.0%255.255.252.0 read '. 'by peername.ip=192.168.8.0%255.255.252.0 read '. 'by peername.ip=192.168.4.0%255.255.252.0 read '. 'by peername.ip=127.0.0.1 read '. 'by peername.ipv6=::1 read '. 'by peername.path=/var/run/slapd/ldapi read '. 'by * none ',
I have a ipv6 network 2002:3cf1:f856::/48 but I can't seem to put in 'by peername.ipv6=2002:3cf1:f856::%48 read '.
do I need to write out a complete mask
'by peername.ipv6=2002:3cf1:f856::%<mask> read '.
I am not sure what that mask would look like
65535.65535.65535.0.0.0.0.0 ?
Alex
Alex Samad writes:
I am trying to build a olcaccess statement and I am wondering how to implement a ipv6 network
I haven't tried, but a look at slapd.access(5) and aclparse.c suggests by peername.ipv6=<address>%<mask> where <address> and <mask> are hex IPv6 addresses. Default mask is FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF.
On Fri, Jan 15, 2010 at 06:24:56PM +0100, Hallvard B Furuseth wrote:
Alex Samad writes:
I am trying to build a olcaccess statement and I am wondering how to implement a ipv6 network
I haven't tried, but a look at slapd.access(5) and aclparse.c suggests by peername.ipv6=<address>%<mask> where <address> and <mask> are hex IPv6 addresses. Default mask is FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF.
strange, that isn't in my man page, I suppose it makes sense, thanks, will try
openldap-technical@openldap.org