[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
ACL and New users binding as anonym haveous
- To: "openldap-technical@openldap.org" <openldap-technical@openldap.org>
- Subject: ACL and New users binding as anonym haveous
- From: cbulist <cbulist@gmail.com>
- Date: Tue, 12 Feb 2013 15:18:47 -0600
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:subject :content-type:content-transfer-encoding; bh=FhyQdJBsyQkcMTY5Cb2jSW2Dg62tNGzjGwG6x+y64fE=; b=axrzywm8PADIDV/EvOE0JnQzmg8sFreQFwlI5zMku107HMjqbMFjyasS4fzsQtzhuy CnjKj901195JCgsx5a+BJ8UHjDLXK13Sbr07SgC4DwVPCLjwhiyIU0PXEGx/uzvq9Iuc XyfpFl2+ShwX2SK+JAvTQplHFWj+nMDcz0YG08lrH6lOPiuU10aMsKr2GHOJMBJv/now t/FuD1/uCwS2soq7ahbwYm/B1EJOKcOX0rFFhJiSVL5zqAndKTZD5P/wvH3ybAfyL1GT VvCI5mRlax39ye4W3MpN64m1Q18HuLOVxVIYwEk2Tq7j/LzgdzkMsgHCMnMvAA/FIoNN s0uw==
- User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.24) Gecko/20111108 Fedora/3.1.16-1.fc14 Thunderbird/3.1.16
Hi,
We have openldap 2.4.33 running without problem.
In our first configuration we created a simple ACL in order to get
access to every user.
access to *
by * read
Then we changed it to:
access to *
by self write
by anonymous auth
by * none
This ACL rules works perfectly with users that were logged by ssh before
to change but users created and that never were logged after this ACL
can not login. I review the openldap log file and I can see the user is
trying to bind using anonymous instead of its uid.
Are there any way to send the full user DN
(uid=user,ou=People,dc=company,dc=com) to Ldap?
Thanks in advance!