George Holbert wrote: > I've noticed that the 'ip' keyword in ACI bind rules seems to have no > effect on its own. For example, > > This does not deny access to IP 1.2.3.4: > > aci: (version 3.0; acl "Deny 1.2.3.4"; deny(all) (ip = "1.2.3.4");) > > > > But when combined with a userdn clause like this, it works: > > aci: (version 3.0; acl "Deny 1.2.3.4"; deny(all) (userdn = > "ldap:///anyone";) and (ip = "1.2.3.4");) > > > > Is this known/expected behavior? > Just want to make sure I'm interpreting this right. Looks like it's probably a bug in the aci code. > > Thanks a lot, > -- George > > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3245 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20070402/765f16a9/attachment.bin
