[Date Prev][Date Next] [Chronological] [Thread] [Top]

Access rights for a group member



Hi,

I'm trying to set access rights so that a group member can see himself as a member of a group but not the other members. For example :

dn: cn=group1,[...]
cn: group1
member: uid=user1,[...]
member: uid=user2,[...]
objectClass: groupOfNames
owner: uid=user3,[...]

if user1 searches for "cn=group1", he would see :

dn: cn=group1,[...]
cn: group1
member: uid=user1,[...]
objectClass: groupOfNames

without user2 being listed.  I tried (among others things!) the following :

access to dn=".*,[...]" attrs=member
    by dnattr=owner read
    by dnattr=member selfread

which returns (for user1) :

dn: cn=group1,[...]
cn: group1
objectClass: groupOfNames

without any member listed. I tried many other ways and tried to see if I could find anything in the logs without any success. Is there any way to do this? I'm really out of ideas...

I'm using openldap 2.1.30.

Thanks in advance you for your answers.  :)