remove admin userPassword read permission,

implement user add mod get del endpoints
2025-02-11 07:09:47 +00:00
parent 63e9f47409
commit 1d758d6e28
3 changed files with 122 additions and 11 deletions
--- a/openldap/auth.template.ldif
+++ b/openldap/auth.template.ldif
@@ -5,7 +5,7 @@ delete: olcAccess
 -
 add: olcAccess
 olcAccess: {0}to attrs=userPassword
-    by group/groupOfNames/member="cn=admins,ou=groups,$BASE_DN" write
+    by group/groupOfNames/member="cn=admins,ou=groups,$BASE_DN" =wcdx
    by self write 
    by anonymous auth 
    by * none