In 2005 this was not possible, has this changed?
> access to dn.children="ou=users,o=mydomain.com" filter=(groupname=(.+)) > by group.expand="cn=$1,ou=groups,o=mydomain.com" write [1] https://www.openldap.org/lists/openldap-software/200501/msg00322.html -----Original Message----- To: openldap-technical Subject: Acl with variable in filter Is it possible to have a variable VAR in an acl filter? Something like this: to dn="[email protected],ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc= aaaaa,dc=local" filter="(sendmailMTAMapValue=VAR1) by ssf=64 dn.exact="uid=VAR1,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=local" read
