Michael Ströder wrote:
> I'm trying to configure proxy authz with 2.4.24 without luck testing with
> ldapwhoami -X.
> 
> Now I wonder if attribute 'authzTo' is now handled as X-ORDERED [1].
> Unfortunately the subschema subentry does not contain a attribute type
> description for 'authzTo'. The server adds prefix "{0}" to my authzTo
> attribute value.

Yes, schema_prep.c contains:

        /* access control externals */
        { "authzTo", "( 1.3.6.1.4.1.4203.666.1.8 "
                        "NAME ( 'authzTo' 'saslAuthzTo' ) "
                        "DESC 'proxy authorization targets' "
                        "EQUALITY authzMatch "
                        "SYNTAX 1.3.6.1.4.1.4203.666.2.7 "
                        "X-ORDERED 'VALUES' "
                        "USAGE distributedOperation )",

Ciao, Michael.

Reply via email to