qzwi/bundlewrap
2
1
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

bundles/openldap: fix config

Browse source
This commit is contained in:
Franzi 2021-12-17 21:16:54 +01:00
parent 486dfe7fa5
commit 943b454b8a
Signed by: kunsi
GPG key ID: 12E3D2136B818350
1 changed files with 20 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
bundles/openldap/files/slapd.conf
View file

@ -62,26 +62,37 @@ memberof-refint TRUE
overlay ppolicy overlay ppolicy
#access to dn.one="ou=QZWI,dc=qzwi,dc=de" access to dn.one="ou=Users,dc=qzwi,dc=de"
# attrs=userPassword attrs=userPassword
# by anonymous auth by anonymous auth
# by * break by * break
#access to * by group="ou=qzwi-admins,ou=Groups,dc=qzwi,dc=de" manage by * break access to *
by group="ou=qzwi-admins,ou=Groups,dc=qzwi,dc=de" manage
by * break
% for tree, matches in sorted(conf.get('access', {}).items()): % for tree, matches in sorted(conf.get('access', {}).items()):
# ${tree} # ${tree}
% for access, user in sorted(matches.items()): % for access, user in sorted(matches.items()):
access to dn.sub="${tree}" by dn.exact="${user}" ${access} by * break access to dn.sub="${tree}"
by dn.exact="${user}" ${access}
by * break
% endfor % endfor
# / ${tree} # / ${tree}
% endfor % endfor
# Grant read access to all applications # Grant read access to all applications
#access to dn.children="ou=Applications,dc=qzwi,dc=de" attrs=userPassword by anonymous auth by * break access to dn.children="ou=Applications,dc=qzwi,dc=de"
#access to dn.sub="ou=People,dc=qzwi,dc=de" by dn.children="ou=Applications,dc=qzwi,dc=de" read by * break attrs=userPassword
#access to dn.sub="ou=Groups,dc=qzwi,dc=de" by dn.children="ou=Applications,dc=qzwi,dc=de" read by * break by anonymous auth
by * break
access to dn.sub="ou=Users,dc=qzwi,dc=de"
by dn.children="ou=Applications,dc=qzwi,dc=de"
read by * break
access to dn.sub="ou=Groups,dc=qzwi,dc=de"
by dn.children="ou=Applications,dc=qzwi,dc=de"
read by * break
database monitor database monitor
rootDN "cn=admin,cn=Monitor" rootDN "cn=admin,cn=Monitor"