Mandi! Luca Scamoni
  In chel di` si favelave...

> allora vuol dire che non hai letto bene. man slapd.access:

Decisamente, anche perchè quattro righe più sotto c'era anche
l'esempio che calzava a pennello.

       One  useful  application  is  to  easily grant write privileges to an 
updatedn that is different from the rootdn.  In this case,
       since the updatedn needs write access to (almost) all data, one can use

            access to *
                 by dn.exact="cn=The Update DN,dc=example,dc=com" write
                 by * break

       as the first access rule.  As a consequence, unless the operation is 
performed with the updatedn  identity,  control  is passed
       straight to the subsequent rules.


(write a parte). Scusate. :(

-- 
dott. Marco Gaiarin                                 GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''                http://www.sv.lnf.it/
  Polo FVG  -  Via della Bontà, 7 - 33078  -  San Vito al Tagliamento (PN)
  marco.gaiarin(at)sv.lnf.it      tel +39-0434-842711  fax +39-0434-842797



_______________________________________________
OpenLDAP mailing list
[email protected]
https://www.sys-net.it/mailman/listinfo/openldap


Rispondere a