Re: Fwd: REG: I thought I got the ACLs, but......

To: Quanah Gibson-Mount <quanah@symas.com>

Subject: Re: Fwd: REG: I thought I got the ACLs, but......

From: 8zero2 operations <8zero2ops@gmail.com>

Date: Thu, 7 Sep 2017 10:29:17 +0530

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=Ho0OsRuxDuBhZnJaCxd9gWd+5+HJ0U8P/+saaWsEuBI=; b=BxppOoAEcIKnZyhT8ACOCwCa+V7PWiVicYYd0Hm3WKdhJINQyYHzRuDdDeokkyumQ5 T2RYbojfTP/YVVZgcmhTeaIxzLFIjqC5V+n3cQUmlZyhjHk8LUr4aKET+zCQ54tmLPZ9 VMI6X1sPy75R0TNeY53kzirYZuy01lO9d5kneKPWn8KJFyAFGTkUNYUk/W/fKy7RZns1 ftsacZg2F2V6MoJs1pSXhqHOBKNzaLk1UMe4jW2Zdt3MHOvP/s2hb4r21WTQITacr7DB frPd71Ysvq/DTFvWtJgKUbY7LW8o0TynQsKZS8QmMsJvuVezXWxA9mZuSN5Vo/ue5dQb MTOw==

In-reply-to: <BC8A3E0D770C7DB8E500E841@192.168.1.30>

References: <CAK7iNp5zRiXXFKEHSvU_G2Kzz_oMkWKiFuX3sa3DZM8oUsJMXQ@mail.gmail.com> <CAK7iNp54vVeJrMX1Fz-YVpE039yuS5eGy1er9nE-wJvOp2uKaQ@mail.gmail.com> <WM!bfe93de04ff96eb3bf249e1af92053c84b467ba6e84cb32ebedb2d33f6c370d3eaddf618b48f0e595fc95c23f39c214e!@mailstronghold-2.zmailcloud.com> <BC8A3E0D770C7DB8E500E841@192.168.1.30>

Thanks man, was searching down the wrong subtree :/, These are the two things I was doing wrong.

1.) I thought i need explicit access to entry and children attributes.

2.) I was searching in root DN and was expecting the accessible DNs to come in result, whereas access(search/read/write access) will also be needed.

finally pheww.. I spent one whole day trying to understand this :/

Regards,

Mail: 8zero2.in@gmail.com
Facebook: www.facebook.com/8zero2
Twitter: @8zero2_in
Blog: blog.8zero2.in

On Wed, Sep 6, 2017 at 8:30 PM, Quanah Gibson-Mount <quanah@symas.com> wrote:

--On Wednesday, September 06, 2017 6:15 PM +0530 8zero2 operations <8zero2ops@gmail.com> wrote:

So here is my scenario I have an ou of "user" and an ou of "Administrator"
now one user from administrator branch should be able to edit anything in
user branch and the other user should only be able to read the branch
"user", also I want userPassword to be visible to only Administrator
which has write permissions.

I suggest reading up on the "entry" pseudo-attribute as documented in the slapd.access(5) man page.

--Quanah

--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>

References:

Fwd: REG: I thought I got the ACLs, but......
- From: 8zero2 operations <8zero2ops@gmail.com>