[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ACL problem in slapd.conf

To: openldap-software@openldap.org
Subject: Re: ACL problem in slapd.conf
From: Thomas van Oudenhove <vanouden@univ-toulouse.fr>
Date: Fri, 04 Sep 2009 13:35:03 +0200
In-reply-to: <4AA0E5C6.7000700@wpkg.org>
Openpgp: url=https://but.univ-toulouse.fr/pub/docs/ut.vanouden/public/ThomasvO_vanouden_AT_univ-toulouse.fr_0x26DF48EA_pub.asc
References: <4AA0E5C6.7000700@wpkg.org>
User-agent: Thunderbird 2.0.0.23 (X11/20090817)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

hello,

Tomasz Chmielewski a écrit :
> My rule in slapd.conf is:
> 
> access to dn="ou=Users,dc=example,dc=com"
>    by dn="uid=Operator,ou=Users,dc=example,dc=com" write
>    by dn="uid=Operator,ou=Users,dc=example,dc=com" read
> 
> I also tried to use:
> 
> access to dn.subtree="ou=Users,dc=example,dc=com"
>   ...

I have this rule:

access to dn.subtree="ou=services,dc=example,dc=com"
   by dn="uid=serviceswriterunr,ou=people,dc=example,dc=com" write
   by * none

(without the read...) which works here...

hope that'll help,

- --
Thomas van Oudenhove - Université de Toulouse
tél: (+33) 5 61 36 60 45
jabberID: thomasvo@im.apinc.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkqg+2cACgkQSvC+RibfSOrNxQCgx/GPHiRwWfIEeHTeeB4g4TEq
m/cAnihtOXz0nIRGT20Zc354UIMLv0B8
=VgAU
-----END PGP SIGNATURE-----

References:
- ACL problem in slapd.conf
  - From: Tomasz Chmielewski <mangoo@wpkg.org>

Prev by Date: Re: ACL problem in slapd.conf
Next by Date: Re: ACL problem in slapd.conf
Index(es):
- Chronological
- Thread