mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-02-23 14:09:39 +08:00
Code Issues Packages Projects Releases Wiki Activity

ITS#7700 - Update documentation about the "limits" configuration option

Browse Source
This commit is contained in:
Quanah Gibson-Mount 2017-03-29 14:29:25 -07:00
parent 515ac60fdc
commit 207fde15eb
2 changed files with 16 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
doc/guide/admin/limits.sdf
View File

@ -97,31 +97,35 @@ When using the {{slapd config}} backend, the corresponding
attribute is {{EX:olcLimits}}. The syntax of
the values is the same in both cases.
> limits <who> <limit> [<limit> [...]]
> limits <selector> <limit> [<limit> [...]]
The {{limits}} clause can be specified multiple times to apply different
limits to different initiators. The server examines each clause in turn
until it finds one that matches the ID that requested the operation.
until it finds one that matches the operation's initiator or base DN.
If no match is found, the global limits will be used.
H3: Specify who the limits apply to
The {{EX:<who>}} part of the {{limits}} clause can take any of these values:
The {{EX:<selector>}} part of the {{limits}} clause can take any of these values:
!block table; align=Center; coltags="EX,N"; \
title="Table ZZZ.ZZZ: Entity Specifiers"
title="Table 9.1: Limits Entity Specifiers"
Specifier|Entities
*|All, including anonymous and authenticated users
anonymous|Anonymous (non-authenticated) users
users|Authenticated users
self|User associated with target entry
dn[.<basic-style>]=<regex>|Users matching a regular expression
dn.<scope-style>=<DN>|Users within scope of a DN
dn[.<type>][.<style>]=<pattern>]|Entry or entries within a scope that match <pattern>
group[/oc[/at]]=<pattern>|Members of a group
!endblock
The rules for specifying {{EX:<who>}} are the same as those used in
access-control rules.
Where
{{type}} can be one of self or this and
{{style}} can be one of exact, base, onelevel, subtree, children, regex, or anonymous
More information can be found in the {{slapd.conf}}(5) or {{slapd-config}}(5) manual
pages.
H3: Specify time limits

5
doc/guide/admin/slapdconfig.sdf
View File

@ -305,9 +305,10 @@ This marks the beginning of a new {{TERM:BDB}} database instance
declaration.
H4: limits <who> <limit> [<limit> [...]]
H4: limits <selector> <limit> [<limit> [...]]
Specify time and size limits based on who initiated an operation.
Specify time and size limits based on the operation's initiator or base
DN.
See the {{SECT:Limits}} section of this guide and {{slapd.conf}}(5)
for more details.