[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Access control entries problem

Gabriel,

Yes I tried but the result remains the same.

Thanks for your response,


Gabriel Stein wrote: 
Vincent,

You tried to put this rules before the others access control rules?

Keep in touch.

Hugs,


On 5/22/07, Vincent Batoufflet <vincent@buf.fr> wrote: 

Hi everyone,

I try to setup some access rules for some openldap servers but I am
experiencing some difficulties with Access Control Entries.

I want to allow anonymous access to a specific branch of my ldap tree
(autofs mount points):

        ou=mount,o=organization,dc=domain,dc=com

This rule works perfectly if I comment all others rules, but when at
least one of them is commented out, it isn't working anymore.

Do you have any idea ?

Thanks.



See above my ldap access rules:
# Default access rule
defaultaccess   search

# Access to passwords
access to attrs=userPassword
         by dn="cn=replication,ou=role,dc=domain,dc=com" write
         by dn="cn=system,ou=role,dc=domain,dc=com" read
         by dn="cn=ftp-client,ou=role,dc=domain,dc=com" read
         by self write
         by * auth

# FTP access
access to dn.subtree="ou=ftp,o=organization,dc=domain,dc=com"
         by dn="cn=replication,ou=role,dc=domain,dc=com" write
         by dn="cn=ftp-manager,ou=role,dc=domain,dc=com" read
         by dn="cn=ftp-client,ou=role,dc=domain,dc=com" read

# AutoFS access
acces to dn.subtree="ou=mount,o=organization,dc=domain,dc=com"
         by dn="cn=replication,ou=role,dc=domain,dc=com" write
         by anonymous read

# Global accesses
access to *
         by dn="cn=replication,ou=role,dc=domain,dc=com" write
         by dn="cn=system,ou=role,dc=domain,dc=com" read
         by dn="cn=extranet,ou=role,dc=domain,dc=com" read

# Access to the base (prevent SASL problems)
access to dn.base=""
         by * read

--
Vincent Batoufflet

Buf Compagnie
3 rue Roquepine 75008 Paris, FRANCE
tel +33 1 42 68 18 28 - fax +33 1 42 68 18 29






--
Vincent Batoufflet

Buf Compagnie
3 rue Roquepine 75008 Paris, FRANCE
tel +33 1 42 68 18 28 - fax +33 1 42 68 18 29