Novell LINUX ENTERPRISE SERVER 10 SP2 - INSTALLATION AND ADMINISTRATION Installation Manual page 693

• what is a placeholder for the object or attribute to which access is granted. Individ-
ual directory branches can be protected explicitly with separate rules. It is also
possible to process regions of the directory tree with one rule by using regular ex-
pressions. slapd evaluates all rules in the order in which they are listed in the
configuration file. More general rules should be listed after more specific ones—the
first rule slapd regards as valid is evaluated and all following entries are ignored.
• who determines who should be granted access to the areas determined with what.
Regular expressions may be used. slapd again aborts the evaluation of who after
the first match, so more specific rules should be listed before the more general ones.
The entries shown in Table 36.2, "User Groups and Their Access Grants" (page 675)
are possible.
Table 36.2 User Groups and Their Access Grants
Tag
*
anonymous
users
self
dn.regex=<regex>
• access specifies the type of access. Use the options listed in Table 36.3, "Types
of Access" (page 675).
Table 36.3 Types of Access
Tag
none
auth
Scope
All users without exception
Not authenticated ("anonymous") users
Authenticated users
Users connected with the target object
All users matching the regular expression
Scope of Access
No access
For contacting the server
LDAP—A Directory Service 675