remove admin userPassword read permission,

implement user add mod get del endpoints
2023-12-15 23:20:43 +00:00
parent ee666f6e08
commit 77c556aa67
3 changed files with 122 additions and 11 deletions
--- a/openldap/auth.template.ldif
+++ b/openldap/auth.template.ldif
@@ -5,7 +5,7 @@ delete: olcAccess
 -
 add: olcAccess
 olcAccess: {0}to attrs=userPassword
-    by group/groupOfNames/member="cn=admins,ou=groups,$BASE_DN" write
+    by group/groupOfNames/member="cn=admins,ou=groups,$BASE_DN" =wcdx
    by self write 
    by anonymous auth 
    by * none