George Holbert wrote:

I've noticed that the 'ip' keyword in ACI bind rules seems to have no effect on its own. For example,

This does not deny access to IP 1.2.3.4:

aci: (version 3.0; acl "Deny 1.2.3.4"; deny(all) (ip = "1.2.3.4");)

But when combined with a userdn clause like this, it works:

aci: (version 3.0; acl "Deny 1.2.3.4"; deny(all) (userdn = "ldap:///anyone") and (ip = "1.2.3.4");)

Is this known/expected behavior? Just want to make sure I'm interpreting this right.

Looks like it's probably a bug in the aci code.

Thanks a lot, -- George

-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users