slapacl

From RaySoft

slapacl is used to check the behavior of the slapd in verifying access to data according to ACLs. It opens the slapd.conf configuration file, reads in the access and defaultaccess directives, and then parses the attribute list given on the command-line; if none is given, access to the entry pseudo-attribute is tested.[1]

Documentation

Syntax

slapacl [PARAMETER ...] ATTRIBUTE

Parameters

-b DN
Specify the DN which access is requested to; the corresponding entry is fetched from the database, and thus it must exist. The 'DN' is also used to determine what rules apply; thus, it must be in the naming context of a configured database.
-D DN
Specify a DN to be used as identity through the test session when selecting appropriate <by> clauses in access lists.
-f FILE
Specify an alternative slapd.conf FILE.
-v
Enable verbose mode.

References

  1. man 8 'slapacl'