Am Sat, 29 Jun 2013 19:49:08 +0200
schrieb Ole <[email protected]>:

>   access to dn.regex=".*ou=([^,]+),ou=mail,dc=example,dc=tld$"
>     by dn.onelevel,expand="ou=admins,ou=$1,ou=mail,dc=example,dc=tld" write
>     by * break

Oh sorry, I have to correct this. It is more secure to use:

  access to dn.regex="^(.+,)?ou=([^,]+),ou=mail,dc=example,dc=tld$"
    by dn.onelevel,expand="ou=admins,ou=$1,ou=mail,dc=example,dc=tld" write
    by * break

please see [1] for explanation.

Regards,
Ole

Attachment: signature.asc
Description: PGP signature

Reply via email to