Thanks David . Regarding the order of ACI , I meant for example, say
there are 4 ACIs on dc=example,dc=com.
One for config admins, one for directory admins, Anonymous Access and
one for group admin listed in that order. Whether this particular order
has any impact ? Or the order is insignificant ?
David Boreham wrote:
discover wrote:
> Is there any way to see the order of ACI evaluation for search/mod
> ...etc ?
Not easily. You might me able to glean some information by enabling
access control logging and looking at the error log output when you
submit
an operation.
> Also does the order of ACI impact the performance ?
Probably not. (not sure if you mean the order the aci attributes
are added to the DS -- in that case absolutely not; or if you
are asking about the internal ordering of clauses within a
single aci -- in that case probably not).
To gain a total understanding you'd really need to step through
the code in the debugger, which would only suit those
with a strong constitution.
--
Fedora-directory-devel mailing list
Fedora-directory-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-devel