Re: Access control

To: Ben Beuchler <insyte@gmail.com>
Subject: Re: Access control
From: Pierangelo Masarati <ando@sys-net.it>
Date: Sat, 25 Jun 2005 09:07:52 +0200
Cc: openldap-software@OpenLDAP.org
Domainkey-signature: a=rsa-sha1; s=mail; d=sys-net.it; c=simple; q=dns; b=bn/I+G9+8YpKZk6XlOlXe8w6CrF5gfIN0MluIsqApylylZeDGYB26gPF6L2QZ0CSA FNsrSBIeVsNFQ6EoGSMEQ==
In-reply-to: <479b70ed0506211419730d66e3@mail.gmail.com>
References: <479b70ed0506211419730d66e3@mail.gmail.com>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7) Gecko/20050511 White Box/1.7.7-1.1.3.4.WB1

Ben Beuchler wrote:

With that approach, anonymous users see nothing.  If I comment out the
second ACL, the query falls through to the list ACL in my config,
which is:

access to *
      by <specific accounts> write
      by * read

Thanks for any insight!

I suggest you read through slapd.access(5), section "OPERATION REQUIREMENTS" for the access privileges that are required for search operations.

p.


   SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497

References:
- Access control
  - From: Ben Beuchler <insyte@gmail.com>