[Fedora-directory-users] ip in ACI bind rules

[Richard Megginson]

George Holbert wrote:
> I've noticed that the 'ip' keyword in ACI bind rules seems to have no 
> effect on its own. For example,
>
> This does not deny access to IP 1.2.3.4:
>
> aci: (version 3.0; acl "Deny 1.2.3.4"; deny(all) (ip = "1.2.3.4");)
>
>
>
> But when combined with a userdn clause like this, it works:
>
> aci: (version 3.0; acl "Deny 1.2.3.4"; deny(all) (userdn = 
> "ldap:///anyone") and (ip = "1.2.3.4");)
>
>
>
> Is this known/expected behavior?
> Just want to make sure I'm interpreting this right.
Looks like it's probably a bug in the aci code.
>
> Thanks a lot,
> -- George
>
>
> -- 
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20070402/765f16a9/attachment.bin>