Michael Ströder wrote: > HI! > > Frankly I forgot whether I asked this before: > > Let there be ACLs with dn.regex="..", attrs=foo,bar and val.regex=".." > in the <what> clauses. > > Obviously depending on complexity of regex-pattern and length of DNs / > avals the regex checking is more expensive than equality checking of attrs=. > > Can I improve ACL performance by order of <what> clauses or are they > processed in fixed order anyway? If in fixed order, which one?
The order is fixed, in order of increasing granularity. DN first, attribute next, value-specific last. That is the only order that makes logical sense. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/
