mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-01-24 13:24:56 +08:00
Code Issues Packages Projects Releases Wiki Activity

Clarify handling of global access rules

Browse Source
This commit is contained in:
Kurt Zeilenga 2000-08-11 17:58:03 +00:00
parent dccf57a095
commit e58fe652dc
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
doc/guide/admin/slapdconfig.sdf
View File

@ -822,10 +822,10 @@ means that queries not local to one of the databases defined
below will be referred to the LDAP server running on the
standard port (389) at the host {{EX:root.openldap.org}}.
Line 4 is a global access control. It is applied after any
applicable database access control. Note that requests to
read objects which are not held by any backend (such as
the Root DSE) are only controlled by global directives.
Line 4 is a global access control. It is used only if
no database access controls match or when the target
objects are not under the control of any database (such as
the Root DSE).
The next section of the configuration file defines an LDBM
backend that will handle queries for things in the
@ -897,7 +897,9 @@ purposes, but may be read by authenticated users.
The next section of the example configuration file defines
another LDBM database. This one handles queries involving
the {{EX:dc=example,dc=net}} subtree.
the {{EX:dc=example,dc=net}} subtree. Note that without
line 38, the read access would be allowed due to the
global access rule at line 4.
E: 33. # ldbm definition for example.net
E: 34. database ldbm