Openldap admingroup

Aus xinux.net
Zur Navigation springen Zur Suche springen

Ldif

  • ldapadmingroup.ldif
dn: olcDatabase={1}mdb,cn=config
changetype: modify
delete: olcAccess
-
replace: olcAccess
olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=xinux,dc=net" write by * none
-
add: olcAccess
olcAccess: {1}to * by self write by group.exact="cn=ldapadmins,ou=groups,dc=xinux,dc=net" write by dn="cn=admin,dc=xinux,dc=net" write  by * read
-
add: olcAccess
olcAccess: {2}to dn.base="" by * read

Add

  • ldapmodify -Y EXTERNAL -H ldapi:/// -f