[Fedora-directory-users] ip in ACI bind rules
George Holbert
gholbert at broadcom.com
Fri Mar 30 17:42:05 UTC 2007
I've noticed that the 'ip' keyword in ACI bind rules seems to have no
effect on its own. For example,
This does not deny access to IP 1.2.3.4:
aci: (version 3.0; acl "Deny 1.2.3.4"; deny(all) (ip = "1.2.3.4");)
But when combined with a userdn clause like this, it works:
aci: (version 3.0; acl "Deny 1.2.3.4"; deny(all) (userdn = "ldap:///anyone") and (ip = "1.2.3.4");)
Is this known/expected behavior?
Just want to make sure I'm interpreting this right.
Thanks a lot,
-- George
More information about the Fedora-directory-users
mailing list