On Fri, Jan 17, 2025 at 11:27:01AM +0100, Uwe Sauter wrote:
> Am 17.01.25 um 10:52 schrieb Ondřej Kuzník:
>> presumably you have both IPv4 and IPv6 (or UNIX socket) clients and this
>> attempts to differentiate between the classes/address families?
>
> Hi,
>
> Quote from slapd.access (Debian 12, slapd 2.5.13+dfsg-5):
>
> The special ip style interprets the pattern as
> <peername>=<ip>[%<mask>][{<n>}], where <ip> and
> <mask> are dotted digit representations of the IP and the mask, while <n>,
> delimited by curly
> brackets, is an optional port. The same applies to IPv6 addresses when the
> special ipv6 style is used.
>
> End quote.
>
> 0.0.0.0%0.0.0.0 is <ipv4>%<subnet mask> equivalent to 0.0.0.0/0
> <ipv4>/<prefix length>. Meaning
> every possible IPv4 address.
Yes, as opposed to every IPv6 address (or UNIX socket)? At least that's
pretty much the only thing that jumps out when I read this.
Regards,
--
Ondřej Kuzník
Senior Software Engineer
Symas Corporation http://www.symas.com
Packaged, certified, and supported LDAP solutions powered by OpenLDAP
