Pastebin is 300% more awesome when you are logged in. Sign Up, it's FREE!
Guest

acl.conf

By: a guest on Jan 31st, 2011  |  syntax: None  |  size: 1.40 KB  |  hits: 46  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. access to dn.sub="ou=Group,dc=example,dc=com"
  2.    by users read break
  3.  
  4. access to dn.regex="^(cn=[^,]+,ou=Group,dc=example,dc=com)" attrs=member
  5.    by group.expand="$1" self+z
  6.    by group/UDBgrp/UDBgrpInvited.expand="$1" self+a
  7.    by group/UDBgrp/UDBgrpAdmin.expand="$1" +z
  8.    by group/UDBgrp/UDBgrpSuspended.expand="$1" self+a
  9.    by users read
  10.  
  11. access to dn.regex="^(cn=[^,]+,ou=Group,dc=example,dc=com)" attrs=UDBgrpInvited
  12.    by group/UDBgrp/UDBgrpInvited.expand="$1" self+z
  13.    by group/UDBgrp/UDBgrpAdmin.expand="$1" +az
  14.    by users read
  15.  
  16. access to dn.regex="^(cn=[^,]+,ou=Group,dc=example,dc=com)" attrs=UDBgrpSuspended
  17.    by group.expand="$1" self+a
  18.    by group/UDBgrp/UDBgrpSuspended.expand="$1" self+z
  19.    by group/UDBgrp/UDBgrpAdmin.expand="$1" +z
  20.    by users read
  21.  
  22. access to dn.regex="^(cn=[^,]+,ou=Group,dc=example,dc=com)" attrs=UDBgrpAdmin
  23.    by group/UDBgrp/UDBgrpAdmin.expand="$1" write
  24.    by users read
  25.  
  26. access to dn.regex="^(cn=[^,]+,ou=Group,dc=example,dc=com)" attrs=description
  27.    by group/UDBgrp/UDBgrpAdmin.expand="$1" write
  28.    by users read
  29.  
  30. access to dn.exact="ou=Group,dc=example,dc=com" attrs=children
  31.    by users write
  32.  
  33. # The 'filter' prevents the creation of any non-group objects
  34. access to dn.regex="^(cn=[^,]+,ou=Group,dc=example,dc=com)" attrs=entry filter="(&(objectClass=groupOfNames)(objectClass=UDBgrp))"
  35.    by group/UDBgrp/UDBgrpAdmin.expand="$1" write
  36.    by users add