make user attribute rules specific to people OU

This commit is contained in:
Arthur Lu 2024-10-15 21:23:00 +00:00
parent ee85001fc5
commit 8f0a9892eb

View File

@ -4,12 +4,12 @@ changetype: modify
delete: olcAccess delete: olcAccess
- -
add: olcAccess add: olcAccess
olcAccess: {0}to attrs=userPassword olcAccess: {0}to dn.subtree="ou=people,$BASE_DN" attrs=userPassword
by group/groupOfNames/member="cn=admins,ou=groups,$BASE_DN" =wcdx by group/groupOfNames/member="cn=admins,ou=groups,$BASE_DN" =wcdx
by self write by self write
by anonymous auth by anonymous auth
by * none by * none
olcAccess: {1}to attrs=shadowLastChange,cn,sn olcAccess: {1}to dn.subtree="ou=people,$BASE_DN" attrs=shadowLastChange,cn,sn
by self write by self write
by * read by * read
olcAccess: {2}to dn.subtree="$BASE_DN" olcAccess: {2}to dn.subtree="$BASE_DN"