[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Access rights for a group member
Hi,
I'm trying to set access rights so that a group member can see himself
as a member of a group but not the other members. For example :
dn: cn=group1,[...]
cn: group1
member: uid=user1,[...]
member: uid=user2,[...]
objectClass: groupOfNames
owner: uid=user3,[...]
if user1 searches for "cn=group1", he would see :
dn: cn=group1,[...]
cn: group1
member: uid=user1,[...]
objectClass: groupOfNames
without user2 being listed. I tried (among others things!) the following :
access to dn=".*,[...]" attrs=member
by dnattr=owner read
by dnattr=member selfread
which returns (for user1) :
dn: cn=group1,[...]
cn: group1
objectClass: groupOfNames
without any member listed. I tried many other ways and tried to see if
I could find anything in the logs without any success. Is there any way
to do this? I'm really out of ideas...
I'm using openldap 2.1.30.
Thanks in advance you for your answers. :)