Re: Auth access for search-based mappings?

2010-01-17 Thread masarati
Quoting Michael Ströder mich...@stroeder.com: uid=([^,]*) looks strange to me. How about trying uid=([^,]+) instead? That would only help to avoid matching an empty uid. Anyway, we've already established that the problem is not the search pattern, but the authz-regexp replacement pattern.

Re: Auth access for search-based mappings?

2010-01-17 Thread Jaap Winius
Quoting Jaap Winius jwin...@umrk.nl: authz-regexp uid=([^,]*),cn=example.com,cn=gssapi,cn=auth ldap:///dc=example,dc=com??sub? ((|(entryDN:dnSubtree:=ou=eng,dc=example,dc=com) (entryDN:dnSubtree:=ou=bio,dc=example,dc=com))

Re: Auth access for search-based mappings?

2010-01-16 Thread Jaap Winius
Quoting Michael Ströder mich...@stroeder.com: uid=([^,]*) looks strange to me. How about trying uid=([^,]+) instead? That would only help to avoid matching an empty uid. Anyway, we've already established that the problem is not the search pattern, but the authz-regexp replacement pattern.

Re: Auth access for search-based mappings?

2010-01-15 Thread Jaap Winius
Hi all, My OpenLDAP 2.4 test system uses Kerberos, SASL and GSSAPI. I've got person objects located in two different org. units and want to search both of them for a potential match, so I included these two statements in slapd.conf: authz-regexp

Re: Auth access for search-based mappings?

2010-01-15 Thread Howard Chu
Jaap Winius wrote: Hi all, My OpenLDAP 2.4 test system uses Kerberos, SASL and GSSAPI. I've got person objects located in two different org. units and want to search both of them for a potential match, so I included these two statements in slapd.conf: authz-regexp