remove admin userPassword read permission,

implement user add mod get del endpoints
2023-12-15 23:20:43 +00:00
parent 485017b916
commit 3d1834b5a2
3 changed files with 122 additions and 11 deletions
--- a/openldap/auth.template.ldif
+++ b/openldap/auth.template.ldif
@@ -5,7 +5,7 @@ delete: olcAccess
 -
 add: olcAccess
 olcAccess: {0}to attrs=userPassword
-    by group/groupOfNames/member="cn=admins,ou=groups,$BASE_DN" write
+    by group/groupOfNames/member="cn=admins,ou=groups,$BASE_DN" =wcdx
    by self write 
    by anonymous auth 
    by * none