[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ACL to permit access to some attributes

To: ldap@fadesa.es
Subject: Re: ACL to permit access to some attributes
From: Quanah Gibson-Mount <quanah@stanford.edu>
Date: Fri, 02 Apr 2004 11:36:23 -0800
Cc: openldap-software@OpenLDAP.org
Content-disposition: inline
In-reply-to: <406D3EB1.29433DCB@fadesa.es>
References: <406852D1.17DBB92B@fadesa.es> <2676543445.1080555809@cadabra.stanford.edu> <4069B1E0.3FFC53A@fadesa.es> <2761852313.1080641120@cadabra.stanford.edu> <406AAEA3.8FBFF216@fadesa.es> <65169568.1080726736@cadabra.stanford.edu> <406C438F.5B39E4AA@fadesa.es> <310260340.1080815810@cadabra-dsl.stanford.edu> <406D3EB1.29433DCB@fadesa.es>

--On Friday, April 02, 2004 12:21 PM +0200 "José M. Fandiño" <ldap@fadesa.es> wrote:

=> access_allowed: read access to "uid=00010,dc=fadesa,dc=es" "entry"


Your problem is coming right here.

I suggest you add the following acl:

access to attrs=entry
  by * read

near the top of your ACLs

I was told at one point that this was not necessary anymore, but I have kept it in my ACL files, and you seem to be hitting the same issue.

--Quanah

--
Quanah Gibson-Mount
Principal Software Developer
ITSS/TSS/Computing Systems
ITSS/TSS/Infrastructure Operations
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

Follow-Ups:
- Re: ACL to permit access to some attributes
  - From: "José M. Fandiño" <ldap@fadesa.es>

References:
- Re: ACL to permit access to some attributes
  - From: "José M. Fandiño" <ldap@fadesa.es>
- Re: ACL to permit access to some attributes
  - From: Quanah Gibson-Mount <quanah@stanford.edu>
- Re: ACL to permit access to some attributes
  - From: "José M. Fandiño" <ldap@fadesa.es>

Prev by Date: Re: search / add operations suddenly became hopelessly slow
Next by Date: searching on port 389 or 636
Index(es):
- Chronological
- Thread