Re: Please solve my problem about peername ACL on OpenLdap

["Pierangelo Masarati" <ando@sys-net.it>]

> Hello list,
>
> Can anybody direct me how to use ACL peername in slapd.conf.
>
> if i have acl like that
>
> access to *
>    peername.ip=127.0.0.1 write
>    peername.ip=192.168.1.8 write
> access to * none


This looks incorrect.  I think the right statement, according to
slapd.access(5) would be

access to *
        by peername.ip=127.0.0.1 write
        by peername.ip=192.168.1.8 write

and nothinhg else, if what you want is to allow anyone from those IPs to
have write access and anyone else no access at all.

Having said this, to actually instruct slapd to allow writes by
unauthenticated clients (a nonsense, I admit) you need to tell slapd to do
so by using

allow update_anon

which is detailed in slapd.conf(5).

p.

-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497