Re: isakmpd AND NOT policy

[Philipp Buehler <lists@fips.de>]

On 03/10/2001, Pepijn Vissers <vissers@fox-it.com> wrote To 'tech@openbsd.org':
> Hi list,

Hi list-poster, :>

> certificate. Hence, I am trying to make a policy based on a logical
> NOT instead of the default ||. Below is what I want and what i have 
> accomplished. Ideas would be very welcome.

man 5 keynote ?

[has]
> authorizer: "ca"
> licensees:  "DN:/C=NL/ST=Noord Holland/L=Amsterdam/"
> conditions: app_domain == "IPsec policy" && esp_present == "yes" -> "true";

[wants]
> authorizer: "deny"
> licensees:  "DN:/OU=Roaming user 002/"

Ever thought about re-reading 'CONDITIONS FIELD' Section in keynote(5) ?
Just point the matching license w/ appr. to conditions to -> "false" instead
 -> "true" ?

Untested, but I think that's the rough point of "Ideas" :>

ciao
-- 
Philipp Buehler, aka fips | sysfive.com GmbH | BOfH | NUCH | <double-p> 

#1: Break the clue barrier!
#2: Already had buzzword confuseritis ?