Re: ACL's

[Joe Garcia <jgarcia@gnncast.net>]

Hey Rob,

	I did this, yet I still cannot log on...here is what a typical ldap
entry looks like, some of the attributes are for qmail with the ldap
patches.

dn: uid=akel, o=Greenberg News Networks, c=US
cn: Annette Akel
sn: Akel
objectClass: top
objectClass: person
objectClass: qmailUser
mail: akel@gnncast.net
mailMessageStore: gnnmail/akel/
uid: akel
deliveryMode: normal
userPassword: {crypt}8.dm56sH439sw

Yet everytime I try to get info from the server with Netscape I get this
in response

Mail id invalid or not unique, cannot resolve to directory authorization
entry.

Any idea??

Joe
 


Rob Byrne - Sun Microsystems wrote:
> 
> Joe,
> 
> You want to disallow anonymous access to your server ie. everyone
> is forced to bind to the server befere having the right to see anything.
> This means changing the ACLs to disallow any anonymous access--so remove
> anything that has "*" in the "by" clause of the ACLs.  Also, don't forget
> to set
> the default ACL to "none".
> 
> Rob.
> 
> Joe Garcia wrote:
> 
> > How would I create an access list so that no information is shown until
> > the person sucessfully logs on??  As in they need to enter a valid uid
> > and password before they can get on.