[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Using access entries: How to give write access everbody to his children?

To: OpenLDAP-software@OpenLDAP.org
Subject: Re: Using access entries: How to give write access everbody to his children?
From: Karsten Gorling <kgorling@physik.tu-berlin.de>
Date: Fri, 15 Jul 2005 14:22:42 +0200
Content-disposition: inline
In-reply-to: <25222.195.77.63.25.1121421491.squirrel@webmail.criptos.com>
References: <25222.195.77.63.25.1121421491.squirrel@webmail.criptos.com>
User-agent: Mutt/1.5.6+20040907i

* TomÃ s NÃÃez Lirola <tomas@criptos.com> [050715 14:12]:
> Hi
> entire subbranch. I'm reading slapd.conf "access control" part, but I
> don't succeed. I've been looking for examples, but I've found none like
> this... So now I'm not sure if it can be done...

The proper manpage is slapd.access. Ok as an answer, I would try a
dn.regex-Scheme, but perhaps there are better way to do this.

Adjust this example
access to dn.regex="^(.+,)uid=(.+),rest_of_dn$$"
    by dn.regex="^uid=$2,rest_of_dn$$" write
    by * none # (is implicit)

-- 
Max-Born-Institut (MBI)/Max-Born-StraÃe 2A/12489 Berlin/Karsten Gorling
Telefon: ++49 30 6392 1341 / Telefax: ++49 30 6392 1309 
E-Mail: kgorling@physik.tu-berlin.de or gorling@mbi-berlin.de
Instantmessenger: Jabber: grafzahl@jabber.fsinf.de or ICQ: 95492828
PGP-Fingerprint:  4BEF 23EA 02AE BACA 9918  31FF 285B 0426 0E1A B2FC
----------------- > encrypted E-Mail preferred <------------------------

References:
- Using access entries: How to give write access everbody to his children?
  - From: Tomàs Núñez Lirola <tomas@criptos.com>

Prev by Date: Re: TLS / secure ldap transactions, userPassword hashing questions
Next by Date: Re: Password Controls support?
Index(es):
- Chronological
- Thread