Patch: add OpenLDAPaci #public# access (ITS#2005) ================ Written by Hallvard B. Furuseth and placed into the public domain. This software is not subject to any license of the University of Oslo. ================ I couldn't find a way for an OpenLDAPaci to grant public access to an entry, so I added a dnType #public# for that. It is in the position of subjectDn in the draft, which seems kind of stupid, so I put it in the position of dnType instead. Hallvard B. Furuseth , Aug 2002. diff -u2 -r servers/slapd/acl.c~ servers/slapd/acl.c --- servers/slapd/acl.c~ Mon Jun 17 07:02:45 2002 +++ servers/slapd/acl.c Sun Aug 4 07:01:33 2002 @@ -30,4 +30,5 @@ aci_bv_access_id = BER_BVC("access-id"), aci_bv_anonymous = BER_BVC("anonymous"), + aci_bv_public = BER_BVC("public"), aci_bv_users = BER_BVC("users"), aci_bv_self = BER_BVC("self"), @@ -1709,4 +1710,6 @@ See draft-ietf-ldapext-aci-model-04.txt section 9.1 for a full description of the format for this attribute. + Differences: "this" in the draft is "self" here, and + "self" and "public" is in the position of dnType. For now, this routine only supports scope=entry. @@ -1752,4 +1753,7 @@ } return (rc); + + } else if (ber_bvstrcasecmp( &aci_bv_public, &bv ) == 0) { + return(1); } else if (ber_bvstrcasecmp( &aci_bv_self, &bv ) == 0) {