[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ACLs to allow users to traverse DIT down to their own entry, lock down everything else

To: Andreas Ntaflos <daff@pseudoterminal.org>
Subject: Re: ACLs to allow users to traverse DIT down to their own entry, lock down everything else
From: Howard Chu <hyc@symas.com>
Date: Wed, 05 Jan 2011 13:21:51 -0800
Cc: openldap-technical@openldap.org
In-reply-to: <201101051753.14273.daff@pseudoterminal.org>
References: <201101051753.14273.daff@pseudoterminal.org>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:2.0b8pre) Gecko/20101024 Firefox/4.0b8pre SeaMonkey/2.1b2pre

Andreas Ntaflos wrote:

So what do I need to do so users can specify "dc=example,dc=com" as
search base and traverse the directory tree down to their own DN entry?


Read the Operation Requirements section of slapd.access(5).

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/

References:
- ACLs to allow users to traverse DIT down to their own entry, lock down everything else
  - From: Andreas Ntaflos <daff@pseudoterminal.org>

Prev by Date: Re: viewing cn=config
Next by Date: Re: Index for objectclass does not work...
Index(es):
- Chronological
- Thread