ip in ACI bind rules

I've noticed that the 'ip' keyword in ACI bind rules seems
to have no 
effect on its own. For example,

This does not deny access to IP 1.2.3.4:

aci: (version 3.0; acl "Deny 1.2.3.4"; deny(all)
(ip = "1.2.3.4");)



But when combined with a userdn clause like this, it works:

aci: (version 3.0; acl "Deny 1.2.3.4"; deny(all)
(userdn = "ldap:///anyone") and (ip =
"1.2.3.4");)



Is this known/expected behavior?
Just want to make sure I'm interpreting this right.

Thanks a lot,
-- George


--
Fedora-directory-users mailing list
Fedora-directory-usersredhat.com
https://www.redhat.com/mailman/listinfo/fedora-dir
ectory-users

George Holbert wrote:
> I've noticed that the 'ip' keyword in ACI bind rules
seems to have no 
> effect on its own. For example,
>
> This does not deny access to IP 1.2.3.4:
>
> aci: (version 3.0; acl "Deny 1.2.3.4";
deny(all) (ip = "1.2.3.4");)
>
>
>
> But when combined with a userdn clause like this, it
works:
>
> aci: (version 3.0; acl "Deny 1.2.3.4";
deny(all) (userdn = 
> "ldap:///anyone") and (ip =
"1.2.3.4");)
>
>
>
> Is this known/expected behavior?
> Just want to make sure I'm interpreting this right.
Looks like it's probably a bug in the aci code.
>
> Thanks a lot,
> -- George
>
>
> -- 
> Fedora-directory-users mailing list
> Fedora-directory-usersredhat.com
> https://www.redhat.com/mailman/listinfo/fedora-dir
ectory-users

--
Fedora-directory-users mailing list
Fedora-directory-usersredhat.com
https://www.redhat.com/mailman/listinfo/fedora-dir
ectory-users