Re: permissions (acl) for nss_ldap

[Craig Squires <csquires@math.mun.ca>]

On Mon, 14 Jan 2002, Tarjei wrote:

> >
> >
> >access to attr=objectClass
> >        by dn="your-admin-dn-here" write
> >        by * read
> >
> Interesting. So giving access to an objectclass gives the entity (DN,
> group, etc) access to all attributes under that objectclass?
>
> Tarjei
>
Well, I haven't read the source. But this seems to be what nss_ldap does,
a search for objectClass=posixAccount. It seems to be analagous to a
getpwent() system call.

Craig

-- 
........................................................................
$Id: mathdeptsysadmin,v 1.0 Mon Jan 14 13:23:19 2002 Craig Squires Exp $