Return-Path: Delivered-To: apmail-directory-dev-archive@www.apache.org Received: (qmail 80489 invoked from network); 23 Sep 2005 14:36:59 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 23 Sep 2005 14:36:59 -0000 Received: (qmail 78676 invoked by uid 500); 23 Sep 2005 14:36:57 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 78635 invoked by uid 500); 23 Sep 2005 14:36:57 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Received: (qmail 78620 invoked by uid 99); 23 Sep 2005 14:36:57 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 23 Sep 2005 07:36:57 -0700 X-ASF-Spam-Status: No, hits=0.1 required=10.0 tests=HTML_30_40,HTML_MESSAGE,RCVD_BY_IP,SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of trustin@gmail.com designates 64.233.162.204 as permitted sender) Received: from [64.233.162.204] (HELO zproxy.gmail.com) (64.233.162.204) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 23 Sep 2005 07:37:04 -0700 Received: by zproxy.gmail.com with SMTP id q3so651462nzb for ; Fri, 23 Sep 2005 07:36:34 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:references; b=aFiW3Y4/n3ru3LkJ2oWKIumB8YX/sRUNs8xC2NjrqJrB+a31+aYHcQPn0sBp3Ey+Uuwa5whNo/BcG2dRD3McWf+LPC40sfIOEf3kCJ8O1Zzr+Yymo35kmiAvMYAixU660GzPgxZ4SgpoEBCtBJp72qdxSldvSFaCAa7XrkMcwHg= Received: by 10.54.50.41 with SMTP id x41mr507734wrx; Fri, 23 Sep 2005 07:36:34 -0700 (PDT) Received: by 10.54.71.11 with HTTP; Fri, 23 Sep 2005 07:36:33 -0700 (PDT) Message-ID: <768dcb2e050923073627e370e6@mail.gmail.com> Date: Fri, 23 Sep 2005 23:36:33 +0900 From: Trustin Lee Reply-To: Trustin Lee To: Apache Directory Developers List Subject: Re: [ApacheDS] another question while implementing ACDFEngine In-Reply-To: <43340EE8.2010103@bellsouth.net> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_9419_13603025.1127486193210" References: <768dcb2e0509230611112b4c0a@mail.gmail.com> <768dcb2e0509230706a1e2f5c@mail.gmail.com> <43340EE8.2010103@bellsouth.net> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N ------=_Part_9419_13603025.1127486193210 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Now I see that we can get apDN easily in case of prescriptiveACI because it is an attribute of subentry. But what about entryACI? How can I find an appropriate administrative point? Trustin 2005/9/23, Alex Karasulu : > > Trustin Lee wrote: > > > I've found that my main concern is how to find what apDN is. It looks > > like I can find apDN by climbing up the DIT from the entry with user > > DN. But I'm not sure about this. Anyone knows about this? Which > > administrative point should I choose? > > This evaluator (for refinements I would guess) was must have been > designed for evaluating inclusion within a subentry. In this case, the > apDN is the DN of administrative point, the parent just above the > subentry. In it's use with subtreeSpecification inclusion evaluation > (mouth full) this evaluator is fed the specification, the apDn and the > objectClasses of the candidate entry being evaluated. > > HTH, > Alex > > -- what we call human nature is actually human habit -- http://gleamynode.net/ ------=_Part_9419_13603025.1127486193210 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Now I see that we can get apDN easily in case of prescriptiveACI because it= is an attribute of subentry.  But what about entryACI?  How can = I find an appropriate administrative point?

Trustin

2005/9/23, Alex Karasulu <aok123= @bellsouth.net>:
Trustin Lee wrote:

> I've found that my main concern is how to fi= nd what apDN is.  It looks
> like I can find apDN by climbi= ng up the DIT from the entry with user
> DN.  But I'm not s= ure about this.  Anyone knows about this?  Which
> administrative point should I choose?

This evaluator (for r= efinements I would guess) was must have been
designed for evaluating inc= lusion within a subentry.  In this case, the
apDN is the DN of= administrative point, the parent just above the
subentry.  In it's use with subtreeSpecification inclusion ev= aluation
(mouth full) this evaluator is fed the specification, the apDn = and the
objectClasses of the candidate entry being evaluated.

HTH= ,
Alex




--
what we call hu= man nature is actually human habit
--
http://gleamynode.net/ ------=_Part_9419_13603025.1127486193210--