Thanks David . Regarding the order of ACI , I meant for example, say
there are 4 ACIs on dc=example,dc=com.
One for config admins, one for directory admins, Anonymous Access and
one for group admin listed in that order. Whether this particular order
has any impact ? Or the order is insignificant ?
David Boreham wrote:
discover wrote:
Is there any way to see the order of ACI evaluation for search/mod
...etc ?
Not easily. You might me able to glean some information by enabling
access control logging and looking at the error log output when you
submit
an operation.
Also does the order of ACI impact the performance ?
Probably not. (not sure if you mean the order the aci attributes
are added to the DS -- in that case absolutely not; or if you
are asking about the internal ordering of clauses within a
single aci -- in that case probably not).
To gain a total understanding you'd really need to step through
the code in the debugger, which would only suit those
with a strong constitution.
--
Fedora-directory-devel mailing list
Fedora-directory-devel@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-devel
