--On Tuesday, April 18, 2023 4:43 PM +0200 Ondřej Kuzník
wrote:
Recently seen a few people assume that authz-regexp search-based mappings
enforce that an entry is found or the Bind is failed, which is not the
case. Obviously the admin guide[0] should be adjusted not to cause more
confusion
Always remember that authentication and authorization are different
things. Many more entities might be able to authenticate than are
authorized to take any particular action.
--
Jordan Brown, Oracle ZFS Storage Appliance, Oracle Solaris
Recently seen a few people assume that authz-regexp search-based mappings
enforce that an entry is found or the Bind is failed, which is not the
case. Obviously the admin guide[0] should be adjusted not to cause more
confusion but the question remains:
Should we be able to decide whether an identi