From b363a3298f8ba475d17dd665f8e37fa6969b8bf5 Mon Sep 17 00:00:00 2001
From: Quanah Gibson-Mount <quanah@openldap.org>
Date: Tue, 20 Apr 2010 00:25:07 +0000
Subject: [PATCH] ITS#5804 documentation update
---
CHANGES | 1 +
doc/man/man5/slapd.access.5 | 18 ++++++++++++++++++
2 files changed, 19 insertions(+)
diff --git a/CHANGES b/CHANGES
index 34f4c1cb3e..247fb5f20c 100644
--- a/CHANGES
+++ b/CHANGES
@@ -51,6 +51,7 @@ OpenLDAP 2.4.22 Engineering
Documentation
admin24 avoid explicity moduleload statements (ITS#6486)
admin24 broken link fixes (ITS#6493,ITS#6515)
+ slapd.access(5) val.regex explanation (ITS#5804)
OpenLDAP 2.4.21 Release (2009/12/20)
Fixed liblutil for negative microsecond offsets (ITS#6405)
diff --git a/doc/man/man5/slapd.access.5 b/doc/man/man5/slapd.access.5
index 8d92cb81e4..f0aef0e5b1 100644
--- a/doc/man/man5/slapd.access.5
+++ b/doc/man/man5/slapd.access.5
@@ -257,6 +257,24 @@ resulting in base, onelevel, subtree or children match, respectively.
The dn, filter, and attrs statements are additive; they can be used in sequence
to select entities the access rule applies to based on naming context,
value and attribute type simultaneously.
+Submatches resulting from
+.B regex
+matching can be dereferenced in the
+.B <who>
+field using the syntax
+.IR ${v<n>} ,
+where
+.I <n>
+is the submatch number.
+The default syntax,
+.IR $<n> ,
+is actually an alias for
+.IR ${d<n>} ,
+that corresponds to dereferencing submatches from the
+.B dnpattern
+portion of the
+.B <what>
+field.
.SH THE <WHO> FIELD
The field
.B <who>
--
GitLab