[Fedora-directory-users] Converting OpenLDAP access directives to FDS ACIs

[Sascha Wilde]

Hi *,

I'm working on the migration of an complex application from OpenLDAP
to FDS.  Currently I'm trying to rebuild the access permissions in
FDS:

- First of all, I think I'm not the first one with the problem, so:
  are there any tools, which can convert slapd.conf access directives
  to FDS ACIs (in ldif format for example)?

- What is the FDS ACI right equivalent to "auth" (=x) in OpenLDAP?

- I'm having various groups in my ldap tree, which are all of the
  class groupOfNames (RFC 2256) but the graphical console doesn't show
  them as groups.  Can I use the groupdn keyword in ACIs to test for
  membership in these groups anyway or do I have to change them to
  groupOfUniqueNames (in which case I would have to change the data as
  well as the membership attribute would be uniqueMember instead of
  member?

Any useful hints are highly appreciated,
cheers
sascha
-- 
Sascha Wilde                                      OpenPGP key: 4BB86568
Intevation GmbH, Osnabrück             http://www.intevation.de/~wilde/
Amtsgericht Osnabrück, HR B 18998             http://www.intevation.de/
Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 188 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20070503/24e55a7a/attachment.sig>