summaryrefslogtreecommitdiff
path: root/ldap/db/50_base.conf.in
diff options
context:
space:
mode:
authorroot <root@borneuni.dk>2008-09-16 17:23:05 +0000
committerroot <root@borneuni.dk>2008-09-16 17:23:05 +0000
commit29f5cd0346180a8ee6b897b5c340659ef2fb4fd3 (patch)
tree1d598cdd46da115d9f2e629dd383d2014ed22238 /ldap/db/50_base.conf.in
parent522de2340e4f29d26bf08588056d4cd6705f7b1a (diff)
parent65fa4c6f74141e00303f8db3d7fb6a130f85033e (diff)
Merge branch 'master' of git://source.jones.dk/local-COMMON
Diffstat (limited to 'ldap/db/50_base.conf.in')
-rw-r--r--ldap/db/50_base.conf.in10
1 files changed, 10 insertions, 0 deletions
diff --git a/ldap/db/50_base.conf.in b/ldap/db/50_base.conf.in
new file mode 100644
index 0000000..b7cd9ae
--- /dev/null
+++ b/ldap/db/50_base.conf.in
@@ -0,0 +1,10 @@
+# The userPassword by default can be changed
+# by the entry owning it if they are authenticated.
+# Others should not be able to see it, except the
+# admin entry below
+access to dn.subtree="ou=SAM,@SUFFIX@" attrs=userpassword,shadowLastChange
+ by dn.exact="@ADMIN@" write
+ by dn.exact=”uid=cifsdc,ou=Entities,ou=Access Control,@SUFFIX@" write
+ by anonymous auth
+ by self write
+ by * none