Nick France wrote:

I'm running OpenLDAP 2.3.35 for a simple 'address book'-type directory.
There will be anonymous access available to read entries, however, I
would like to restrict wildcard searches, and only ever return exact
matches. As the entries are unique, there should only ever be one result
(sizelimit is set to 1 to ensure this).

I've tried many things with ACLs, trying to filter out the wildcard
characters [(!(cn=*\2a*))] but with no success.

Is this possible? Is there a simple flag/directive/compile option to
disable wildcard searching?

Don't bother with ACLs. Just set the "unchecked" size limit.

--
  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP     http://www.openldap.org/project/

Reply via email to