[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Openldap fine grained / advanced ACLs

To: openldap-technical@openldap.org
Subject: Re: Openldap fine grained / advanced ACLs
From: "Dieter Kluenter" <dieter@dkluenter.de>
Date: Tue, 17 Jun 2008 17:18:02 +0200
In-reply-to: <4857CA9B.70303@emergen.biz> (Faraz R. Khan's message of "Tue, 17 Jun 2008 20:30:51 +0600")
References: <4857CA9B.70303@emergen.biz>
User-agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.5-b28 (linux)

"Faraz R. Khan" <faraz.khan@emergen.biz> writes:

> Is it possible to have fine grained ACLs in OpenLDAP? My problem is
> that the 'write' access is too broad. I wish to be able to control
> ADD, modify and delete separately. I tried looking at
> aacls.sourceforge.net but it involves the setup of a separate server
> and looks abandoned.
>
> Any pointers would be appreciated- maybe the denyop module? I was
> trying to find some docs but all I could find was a FAQ entry.

man slapd.access(5), search for 'priv access' and 'Operation
Requirements'

-Dieter


-- 
Dieter Klünter | Systemberatung
http://www.dkluenter.de
GPG Key ID:8EF7B6C6

References:
- Openldap fine grained / advanced ACLs
  - From: "Faraz R. Khan" <faraz.khan@emergen.biz>

Prev by Date: Openldap fine grained / advanced ACLs
Next by Date: Re: Openldap fine grained / advanced ACLs
Index(es):
- Chronological
- Thread