I think that you cannot use ldap:///self as target, and second, I don't understand the relation between the group membership and "self" attribute reading. If you use target = * a allow (read,search) and userdn=ldap:///self you would have the desired result. I mean, is supposed that every user should be able to read its own attributes. If you still need to do something like group and self attributes, probably you need a targetfilter instead of target. Para fedora-directory-users at redhat.co m "C.S.R.C.Murthy" cc <murthy at barc.gov.in> Enviado por: Asunto fedora-directory-users-b aci ounces at redhat.com with group dn and self read Clasificaci?n 17/04/2008 01:46 a.m. Uso Interno Por favor, responda a "General discussion list for the Fedora Directory server project." <fedora-directory-users@ redhat.com> Hello, I need an aci such that when a user of a group binds, he will be able to see only his attribute but not others. I tried the following but it gives syntax error. Please suggest (target = "ldap:///self";) (targetattr = "*") (version = 3.0; acl "test acl"; allow (read,search) (groupdn = "ldap:///cn=internet,ou=groups,dc=example,dc=com";) ; ) -thanks murthy -- Fedora-directory-users mailing list Fedora-directory-users at redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users ======================================================================================== AVISO LEGAL: Esta informaci?n es privada y confidencial y est? dirigida ?nicamente a su destinatario. Si usted no es el destinatario original de este mensaje y por este medio pudo acceder a dicha informaci?n por favor elimine el mensaje. La distribuci?n o copia de este mensaje est? estrictamente prohibida. Esta comunicaci?n es s?lo para prop?sitos de informaci?n y no debe ser considerada como propuesta, aceptaci?n ni como una declaraci?n de voluntad oficial de NUCLEO S.A. La transmisi?n de e-mails no garantiza que el correo electr?nico sea seguro o libre de error. Por consiguiente, no manifestamos que esta informaci?n sea completa o precisa. Toda informaci?n est? sujeta a alterarse sin previo aviso. This information is private and confidential and intended for the recipient only. If you are not the intended recipient of this message you are hereby notified that any review, dissemination, distribution or copying of this message is strictly prohibited. This communication is for information purposes only and shall not be regarded neither as a proposal, acceptance nor as a statement of will or official statement from NUCLEO S.A. . Email transmission cannot be guaranteed to be secure or error-free. Therefore, we do not represent that this information is complete or accurate and it should not be relied upon as such. All information is subject to change without notice.
