Re: slapacl Read:Allow - ldapsearch no result

[Dieter Klünter <dieter@dkluenter.de>]

Am Mon, 26 Jan 2015 14:52:18 +0100
schrieb Uli Tehrani <u_tehrani@yahoo.de>:

> Hello all,
> 
> i want to allow general read access for attribute sshPublicKey.
> 
> I configured the following rule on top
> 
> access to attrs=sshPublicKey
>      by *  read
> 
> 
> slapacl -f /etc/openldap/slapd.conf  -vvv -b 
> uid=utehrani,ou=ActiveUser,ou=PosixUser,ou=User,dc=example,dc=com 
> sshPublicKey/read
> read access to sshPublicKey: ALLOWED
> 
> But when i run ldapsearch. I get no such object
> 
> ldapsearch -LLL  -h ldap1 -x   -b 
> uid=utehrani,ou=ActiveUser,ou=PosixUser,ou=User,dc=example,dc=com 
> sshPublicKey
> No such object (32)

You have no anonymous access to the  base entry, man slapd.access(5)

-Dieter

-- 
Dieter Klünter | Systemberatung
http://sys4.de
GPG Key ID: E9ED159B
53°37'09,95"N
10°08'02,42"E