Besides the obvious workaround, i.e. split the rule into two ACLs, one with the val.regex and another without, I am not sure that I understand how the other special controls (break, continue) can help with this case. Am I missing sth?
On Tue, Oct 14, 2014 at 6:19 PM, Aaron Richton <[email protected]> wrote: > On Tue, 14 Oct 2014, Pierangelo Masarati wrote: > > attrs=entry,objectClass val.regex="objvalue1|objvalue2",attr1,attr2 >>>> >>> >> Sorry, I involuntarily hit "send" too soon. You can find this bit of >> info in slapd.access(5): >> >> Using the form attrs=<attr> val[/matchingRule][.<attrstyle>]=<attrval> >> specifies access to a particular value of a single attribute. In this >> case, only a single attribute type may be given. >> > > I do feel it's worth pointing out that, while you're reading that man > page, the <control> field may prove particularly useful to apply multiple > clauses to your (presumably single) <what> scope. >
