[Date Prev][Date Next]
Re: Group access in LDAP
This is the debuglevel 128 output on a search:
=> acl_access_allowed: search access to entry "cn=Sadi Chenini, o=elex,
=> acl_access_allowed: search access to value "KBO" by "CN=KOEN
<= ldbm_back_group: "CN=KOEN BOSMANS,O=ELEX,C=BE" not in
<= acl_access_allowed: matched by clause #2 access denied
=> access_allowed: exit (cn=Sadi Chenini, o=elex, c=be) attr (uid)
=> access_allowed: entry (cn=admin, o=elex, c=be) attr (uid)
=> acl_get: entry (cn=admin, o=elex, c=be) attr (uid)
<= acl_get:  backend acl cn=admin, o=elex, c=be attr: uid
Maybe there is something wrong with my commandline instruction, this is what
ldapsearch -b "o=elex,c=be" -D "cn=Koen Bosmans, o=elex, c=be" -W
This should be OK, or not??
The result is get with this is nothing, just a new command line and I'm 100%
shure uid=kbo exists!!
----- Original Message -----
From: Niels Baggesen <Niels.Baggesen@uni-c.dk>
Sent: Thursday, December 02, 1999 4:11 PM
Subject: Re: Group access in LDAP
> On Thu, Dec 02, 1999 at 15:20:17 +0100, Koen Bosmans wrote:
> > Can onyone help me with my group problem in openldap???
> > I already searched the FAQ's, mailinglists, etc but could not fing a
> > solution.
> > I only want to create a group in LDAP and access some entries with this
> > group. It sounds easy but I tried almost everything...
> > This is my access part of slapd.conf:
> > access to dn=".*,o=elex,c=BE"
> > by group="cn=admin,o=elex,c=be" read
> > by * none
> > And this is the ldif of my group
> > dn: cn=admin, o=elex, c=be
> > objectclass: top
> > objectclass: groupOfNames
> > cn: admin
> > description: Administrators of the LDAP database
> > member: cn=Peter Tillemans, o=elex, c=be
> > member: cn=Koen Bosmans, o=elex, c=BE
> > This is exactly like that example in the FAQ.
> > I run OpenLDAP 1.2.7 on RedHat 5.2 and compiled it with a standard
> > ./configure (no options given)
> And what is your problem? What does not work? What is the error message?
> What is in the log file?
> Niels Baggesen, UNI-C, Olof Palmes Alle 38, DK-8200 Aarhus N, Denmark
> Email: Niels.Baggesen@uni-c.dk - Tel: +45 8937 6669 - Fax: +45 8937 6677
> --- The purpose of computing is insight, not numbers ---