On Tue, May 5, 2009 at 3:13 PM, Wolfgang Lorenz <[email protected]> wrote:
> Thank you,
>
> I've found a way to achieve exactly what I wanted:
>
> # self may write subentries no one else may read...
> access to dn.regex="^(.+,)+uid=([^,]+),ou=people,dc=example,dc=com$"
> by dn.regex="^uid=$2,ou=people,dc=example,dc=com$$" write
Where possible I would use the self.level{-1} syntax in preference of
regexes since it is more descriptive. It also doesn't depend on the
stability and performance of the OS regex libraries (which use a lot of
malloc/frees).
--
Thanks,
Sean Burford
