Changeset - d0a6d20f081c
[Not reviewed]
0 1 0
Branko Majic (branko) - 10 years ago 2015-03-08 11:21:14
branko@majic.rs
MAR-7: Authorise the LDAP admin to manage directory as well.
1 file changed with 1 insertions and 1 deletions:
0 comments (0 inline, 0 general)
testsite/group_vars/ldap.yml
Show inline comments
 
@@ -22,18 +22,18 @@ ldap_server_config:
 
ldap_permissions:
 
  - filter: '(olcSuffix=dc=example,dc=com)'
 
    rules:
 
      - >
 
        to *
 
        by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage
 
        by dn="cn=admin,dc=example,dc=com" manage
 
        by * break
 
      - >
 
        to attrs=userPassword,shadowLastChange
 
        by self write
 
        by anonymous auth
 
        by dn="cn=admin,dc=example,dc=com" write
 
        by * none
 
      - >
 
        to dn.base=""
 
        by * read
 
      - >
 
        to *
0 comments (0 inline, 0 general)