mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2024-12-21 03:10:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

Additional fix for ITS#4522. The "dn=" ist not optional.

Browse Source
This commit is contained in:
Ralf Haferkamp 2006-05-12 11:48:57 +00:00
parent 4d85c307c4
commit 4d46b8b747
2 changed files with 4 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
doc/man/man5/slapd.access.5
View File

@ -124,7 +124,7 @@ specifies the entity the access control directive applies to.
It can have the forms
.LP
.nf
[dn[.<dnstyle>]=]<dnpattern>
dn[.<dnstyle>]=<dnpattern>
filter=<ldapfilter>
attrs=<attrlist>[ val[/matchingRule][.<attrstyle>]=<attrval>]
.fi
@ -143,9 +143,6 @@ The statement
.B dn=<dnpattern>
selects the entries based on their naming context.
The
.B dn=
part is optional.
The
.B <dnpattern>
is a string representation of the entry's DN.
The wildcard
@ -156,11 +153,7 @@ form is given.
.LP
The
.B <dnstyle>
is also optional; however, it is recommended to specify both the
.B dn=
and the
.B <dnstyle>
to avoid ambiguities.
is optional; however, it is recommended to specify it to avoid ambiguities.
.B Base
(synonym of
.BR baseObject ),

4
servers/slapd/aclparse.c
View File

@ -2192,9 +2192,9 @@ acl_usage( void )
{
char *access =
"<access clause> ::= access to <what> "
"[ by <who> <access> [ <control> ] ]+ \n";
"[ by <who> [ <access> ] [ <control> ] ]+ \n";
char *what =
"<what> ::= * | [dn[.<dnstyle>]=<DN>] [filter=<filter>] [attrs=<attrspec>]\n"
"<what> ::= * | dn[.<dnstyle>=<DN>] [filter=<filter>] [attrs=<attrspec>]\n"
"<attrspec> ::= <attrname> [val[/<matchingRule>][.<attrstyle>]=<value>] | <attrlist>\n"
"<attrlist> ::= <attr> [ , <attrlist> ]\n"
"<attr> ::= <attrname> | @<objectClass> | !<objectClass> | entry | children\n";