From 3bc8643d2f270fc2fcd9eace0ca4a5ef2323a26d Mon Sep 17 00:00:00 2001 From: Jonas Smedegaard Date: Wed, 17 Sep 2008 08:52:30 +0200 Subject: Move password access to 20 (from 50). --- ldap/db/20_base.conf.in | 10 ++++++++++ ldap/db/50_base.conf.in | 10 ---------- 2 files changed, 10 insertions(+), 10 deletions(-) create mode 100644 ldap/db/20_base.conf.in delete mode 100644 ldap/db/50_base.conf.in (limited to 'ldap') diff --git a/ldap/db/20_base.conf.in b/ldap/db/20_base.conf.in new file mode 100644 index 0000000..b7cd9ae --- /dev/null +++ b/ldap/db/20_base.conf.in @@ -0,0 +1,10 @@ +# The userPassword by default can be changed +# by the entry owning it if they are authenticated. +# Others should not be able to see it, except the +# admin entry below +access to dn.subtree="ou=SAM,@SUFFIX@" attrs=userpassword,shadowLastChange + by dn.exact="@ADMIN@" write + by dn.exact=”uid=cifsdc,ou=Entities,ou=Access Control,@SUFFIX@" write + by anonymous auth + by self write + by * none diff --git a/ldap/db/50_base.conf.in b/ldap/db/50_base.conf.in deleted file mode 100644 index b7cd9ae..0000000 --- a/ldap/db/50_base.conf.in +++ /dev/null @@ -1,10 +0,0 @@ -# The userPassword by default can be changed -# by the entry owning it if they are authenticated. -# Others should not be able to see it, except the -# admin entry below -access to dn.subtree="ou=SAM,@SUFFIX@" attrs=userpassword,shadowLastChange - by dn.exact="@ADMIN@" write - by dn.exact=”uid=cifsdc,ou=Entities,ou=Access Control,@SUFFIX@" write - by anonymous auth - by self write - by * none -- cgit v1.2.3