bugPhamm (PHP LDAP Virtual Hosting Manager) - Bugs: bug #12344, example ACLs for OpenLDAP >=...

 
 

bug #12344: example ACLs for OpenLDAP >= 2.2 need some tweaks

Submitted by:  None
Submitted on:  Wed 16 Mar 2005 08:48:26 PM UTC  
 
Category: NoneSeverity: 3 - Normal
Item Group: NoneStatus: Fixed
Privacy: PublicAssigned to: Mirko Grava <mgrava>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Wed 16 Mar 2005 08:48:26 PM UTC, original submission:

The example ACLs (shipped with the latest tarball, or from the CVS) need some tweaks, in general and specifically to work with OpenLDAP >= 2.2.

rationale:

- use dn.regex only where (strictly) required
- start regex patterns with "^.+,<dn>" where a subordinate to <dn> is required
- start regex patterns with "^(.+,)?<dn>" where a subordinate to <dn> is optional (this often requires using $2 in substring substitution)
- move users, anonymous, exact DN match before regex and sets (i.e. the cheaper the sooner to save resources; this should be traded with frequency of occurrence)
- remove "by * none" clauses: they're the default
- always specify dn style qualifiers, to avoid ambiguities

See the attached (untested) patch. Some extra work may be needed to solve some ambiguities, especially in phamm-pdns.acl (I tried to guess the intentions of the writer based on the behavior of earlier versions of OL); some grouping af attriutes with similar rules may occur, to reduce the amount of rules. Hope it helps.

p.

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #2738:  phamm-acls-OL22-2005-03-16.patch added by None (6KiB - text/x-patch - Patch to today's (2005-03-16) CVS)

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 4 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Sat 21 May 2005 08:40:30 AM UTClotabiStatusNone=>Fixed
  Open/ClosedOpen=>Closed
Thu 21 Apr 2005 04:19:39 AM UTClotabiAssigned toNone=>mgrava
Wed 16 Mar 2005 08:48:26 PM UTCNoneAttached File-=>Added phamm-acls-OL22-2005-03-16.patch, #2315

Back to the top


Powered by Savane 3.1-cleanup1