LDAP syntax : shorter notation
 

Hello,

I want to write the following shorter :

access to dn="ou=book1,ou=contacts,ou=110011,dc=webonline" attrs=children
by group.exact="cn=admins,ou=110011,dc=webonline" write
by * none break
access to dn="ou=book2,ou=contacts,ou=110011,dc=webonline" attrs=children
by group.exact="cn=admins,ou=110011,dc=webonline" write
by * none break
access to dn="ou=book3,ou=contacts,ou=110011,dc=webonline" attrs=children
by group.exact="cn=admins,ou=110011,dc=webonline" write
by * none break

can i suggest in what way you want to make it shorter? actually describing a problem is kinda useful. and a please / thank you never hurts either. assuming this is OpenLDAP (is it??) then try a dn.regex: http://www.openldap.org/doc/admin24/access-control.html

Yes this is openLDAP.

You see that I have several OU's beneath ou=contacts,ou=110011,dc=webonline :
- book1
- book2
- book3
- bookX

In stead of repeating the same line every time :

access to dn="ou=bookX,ou=contacts,ou=110011,dc=webonline" attrs=children
by group.exact="cn=admins,ou=110011,dc=webonline" write
by * none break

is there a possibility to write this shorter ?

Thank you for responding.

as above, look at a dn.regex.

Something like :

access to dn.regex="ou=book[123],ou=contacts,ou=110011,dc=webonline" attrs=children

I don't see where <pattern> is explained ? Or are these regular expressions the same as in PHP ?

a regular expression is a standard across all implementations. Unless they are done wrong.

Umm, actually there are lang & tool specific variations http://regex.info/