Re: [Fedora-directory-users] ip in ACI bind rules

[Rich Megginson]

George Holbert wrote:
>  I've noticed that the 'ip' keyword in ACI bind rules
> seems to have no 
>  effect on its own. For example,
>
>  This does not deny access to IP 1.2.3.4:
>
>  aci: (version 3.0; acl "Deny 1.2.3.4"; deny(all) (ip = "1.2.3.4");)
>
>
>
>  But when combined with a userdn clause like this, it works:
>
>  aci: (version 3.0; acl "Deny 1.2.3.4"; deny(all) (userdn = 
>  "ldap:///anyone") and (ip = "1.2.3.4");)
>
>
>
>  Is this known/expected behavior?
>  Just want to make sure I'm interpreting this right. 
Looks like it's
probably a bug in the aci code.
>  Thanks a lot,
>  -- George
>
>
>  -- 
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users