On 01/10/2018 07:03 AM, William Brown wrote:
If I have:
(targetattr=x)(version 3.0; .... allow(read, search)(groupdn=cn=x);)
If cn=x has member cn=y, and cn=y member uid=z
Does uid=z have permission to the targetattr here? IE do our aci's work
through nested groups?
yes, they should, but there is configurable max nesting level
--
Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric
Shander
_______________________________________________
389-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
