Re: Groups

[Jan-Piet Mens <jpm@Retail-SC.com>]

My slapd.conf contains

access          to attr=userpassword
		by self write
		by group="cn=admins,ou=ITAccounts,o=company,c=ru" write
		by * none

Once again: no spaces in the `group=' DN!

Regards,
	-JP



		On Tue, 19 Dec 2000, Tod Thomas wrote:

> How would you set up the ACL for this to allow for authentication by group?
>
> Jan-Piet Mens wrote:
>
> > I use groups like this:
> >
> >      cn=admins,ou=ITAccounts,o=Company, c=RU
> >      cn=Adminstrators of the Directory
> >      objectclass=groupofNames
> >      objectclass=top
> >      member=uid=user1,ou=People,o=Company,c=RU
> >      member=uid=user2,ou=People,o=Company,c=RU
> >
> > You must ensure that the `member' attribute type contains normalized DN
> > (i.e.
> > without blanks) if you wish to use the groups for authentication.
> >
> > Regards,
> >      -JP
> >
> > On Tue, 19 Dec 2000, Michael Kondrashin wrote:
> >
> > > Dear Sirs,
> > >     In my LDAP tree I have users with dn like "uid=user, ou=People,
> > o=Company, c=RU". How to create groups of users in LDAP? I intend to use
> > LDAP for authentication.
> > >
> > >
> > > Best regards,
> > > Michael Kondrashin
> > >
>