Re: restricting acls more by adding a filter

[Quanah Gibson-Mount]

--On Tuesday, August 1, 2023 1:34 PM +0000 Marc <m...@f1-outsourcing.eu> 
wrote:

I have a ldapsearch that returns this object

sendmailMTAClassName: w
sendmailMTAClassValue: xxx
sendmailMTAClassValue: yyy
sendmailMTAClassValue: zzz
objectClass: sendmailMTA
objectClass: sendmailMTAClass

I thought I could strengthen the acl by just appending to with a filter

but if I add these below, the ldapsearch does not return anything err=32

filter=(objectClass=sendmailMTAClass)
filter=(|(objectClass=sendmailMTAClass)(objectClass=sendmailMTA))
filter=(|(objectClass=sendmailMTAClass)(objectClass=sendmailMTA))
filter=(objectClass=sendmailMTA*)


a) ACLs are contextual
b) The above are not fully formed ACL statements.  No conclusions can be 
reached w/o full information.

--Quanah