[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: help with ACL

To: Alberto Aldrigo <alberto.aldrigo@h-farm.com>, openldap-technical@openldap.org
Subject: Re: help with ACL
From: Quanah Gibson-Mount <quanah@symas.com>
Date: Wed, 28 Dec 2016 10:22:12 -0800
Content-disposition: inline
In-reply-to: <WM!da077f5557c42edd6609a6f7b10963a8f189269b0cf55413d47be155c94a3caa5ce8becfde23e45772864dc62d721a16!@mailstronghold-1.zmailcloud.com>
References: <adcf6cbc-38fe-695a-5d78-afa05713d809@h-farm.com> <WM!da077f5557c42edd6609a6f7b10963a8f189269b0cf55413d47be155c94a3caa5ce8becfde23e45772864dc62d721a16!@mailstronghold-1.zmailcloud.com>

--On Friday, December 23, 2016 11:16 AM +0100 Alberto Aldrigo<alberto.aldrigo@h-farm.com> wrote:

 uid=user1 and uid=user6 are company1's administrators, so they can write
in whole o=company1 subtree

Might be best to make an LDAP group with those users as members, and thenwrite an ACL based off of that group for its specific privileges.


--Quanah


--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>

References:
- help with ACL
  - From: Alberto Aldrigo <alberto.aldrigo@h-farm.com>

Prev by Date: Re: Bulk change user's attribute
Next by Date: Re: ppolicy overlay unable to set pwdAccountLockedTime on to-be-locked users due to ACLs
Index(es):
- Chronological
- Thread