On Thu, Aug 31, 2006 at 07:47:32PM +0200, Pierangelo Masarati wrote: > Quanah Gibson-Mount wrote: > >>Sure, I can use that to set a limit for a user but this application > >>needs > >>to bind anonymously (or the equivalent of anonymous, since the > >>credentials would have to be public). > >> > >>I couldn't find anything in the limits directive that would let me > >>specify a part of the directory to set the limit on. Something like: > >>When searching the directory, return only 1 result. > >>Unless searching ou=people, then return all results. > There's no such possibility, since it makes little sense. The only > solution I see, since limits are per-database, consists in putting that > subtree into a separate database, and glue it together to the rest using > the "subordinate" directive. As an alternative, I suggest you use the
And the glue overlay potentially brings in other problems, like replication issues, password policy interaction and probably others I'm not aware of. I would only use it where *really* needed.