Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 08-05-2008 Installation Manual page 689

• what is a placeholder for the object or attribute to which access is granted. Individ-
ual directory branches can be protected explicitly with separate rules. It is also
possible to process regions of the directory tree with one rule by using regular ex-
pressions. slapd evaluates all rules in the order in which they are listed in the
configuration file. More general rules should be listed after more specific ones—the
first rule slapd regards as valid is evaluated and all following entries are ignored.
• who determines who should be granted access to the areas determined with what.
Regular expressions may be used. slapd again aborts the evaluation of who after
the first match, so more specific rules should be listed before the more general ones.
The entries shown in
are possible.
Table 36.2 User Groups and Their Access Grants
Tag
*
anonymous
users
self
dn.regex=<regex>
• access specifies the type of access. Use the options listed in
of Access" (page 671).
Table 36.3 Types of Access
Tag
none
auth
Table 36.2, "User Groups and Their Access Grants"
Scope
All users without exception
Not authenticated ("anonymous") users
Authenticated users
Users connected with the target object
All users matching the regular expression
Scope of Access
No access
For contacting the server
(page 671)
Table 36.3, "Types
LDAP—A Directory Service 671