Re: ssf Security Question

[Kaya Saman <kayasaman@gmail.com>]

On 11/15/2017 04:18 PM, Quanah Gibson-Mount wrote:
> access to dn.children="ou=AddressBook,dc=domain,dc=com"
>     by * read
>
> access to attrs=userPassword
>     by ssf=128 anonymous auth
>     by ssf=128 self write
>
> access to *
>     by ssf=128 self write
>     by ssf=128 users read 

Many Thanks. I installed this suggestion currently. I will keep reading 
and learning in the meantime :-) I mean at present the majority of slapd 
lookups are going through a RADIUS server but I will keep researching to 
integrate them better as there are a few PAM users also accessing slapd.


Regards,

Kaya