OpenLDAP Faq-O-Matic: What ACLs should I start with?

OpenLDAP Faq-O-Matic :

OpenLDAP Software FAQ :

Configuration :

SLAPD Configuration :

Access Control :

What ACLs should I start with?

Generally one should start with a basic ACLs such as:

  access to attr=userpassword
    by self =xw
    by anonymous auth

  access to *
    by self write
    by users read

The first ACL allows users to update (but not read) their passwords, anonynmous users to authenticate against this attribute, and (implicitly) denying all access to others.

The second ACL allows users full access to their entry, authenticated users read access to anything, and (implicitly) denying all access to others (in this case, anonymous users).

[Append to This Answer]

Previous:	How do I use the defaultaccess directive?
Next:	How do I match anonymous users?

This document is: http://www.openldap.org/faq/index.cgi?file=320

	[Search]	[Appearance]
This is a Faq-O-Matic 2.721.test.