[Samba] Re: winbind with ldap backend permissions

[Igor Belyi]

Igor Belyi wrote:
> Thorsten Scherf wrote:
>> this works fine.
>> but what is the difference to "dn=(.*),ou=idmap,dc=example,dc=com"?
>> with my understanding of the ldap-access rules it should just be a 
>> performance issue, souldn't it?!
>>  
>>
> 
> I think the difference is that you forgot to add '.regexp' to your 
> access statement. It should have been:
> dn.regexp="(.*),ou=idmap,dc=example,dc=com"
> otherwise it was matching dn as it is without applying regular 
> expression rules.

Hm.. On the second reading of slapd.access it looks like regex is a 
default dnstyle... I'll try to experiment and see if I can comeup with 
the answer to the 'difference' question.

Igor