Skip to main content

Crate ldap_acis

Crate ldap_acis 

Source
Expand description

LDAP Access Control Instructions (ACI) system.

This crate implements LDAP-style Access Control Instructions built on top of the algebraically-correct acls-rs permission system.

§LDAP ACI Overview

LDAP ACIs control access to directory entries and attributes. They consist of:

  • Target: What entries/attributes the ACI applies to (DN patterns, filters)
  • Permissions: What operations are allowed (read, write, search, compare, add, delete)
  • Bind Rules: Who the ACI applies to (user DNs, groups, IP addresses)

Re-exports§

pub use aci::Aci;
pub use aci::AciBuilder;
pub use aci::AciPolicy;
pub use aci::AttributeSet;
pub use aci::AuthorizationResult;
pub use aci::BindRule;
pub use aci::CompOp;
pub use aci::DnScope;
pub use aci::Scope;
pub use aci::TargetAttrFilter;
pub use aci::TargetAttrFilterOp;
pub use aci::TargetFilter;
pub use cache::CachedAciPolicy;
pub use entry::LdapAttribute;
pub use entry::LdapEntry;
pub use operation::LdapOperation;
pub use operation::LdapPermission;
pub use operation::OperationSet;
pub use operation::OperationType;
pub use operation::PermissionSlice;

Modules§

aci
Access Control Instructions (ACI) implementation.
cache
dn
DN (Distinguished Name) parsing and hierarchy utilities.
entry
LDAP directory entries and attributes.
generator
ACI text format generators for 389-ds and OpenLDAP formats.
operation
LDAP operations and permissions.
parser
ACI parsing for 389-ds and OpenLDAP text formats.
prelude
transformer
Format transformation functions for converting between ACI formats.