summaryrefslogtreecommitdiff
path: root/ldap/db/50_base.conf.in
diff options
context:
space:
mode:
authorJonas Smedegaard <dr@jones.dk>2008-09-16 14:35:52 +0200
committerJonas Smedegaard <dr@jones.dk>2008-09-16 14:35:52 +0200
commit65fa4c6f74141e00303f8db3d7fb6a130f85033e (patch)
tree75678feb03dc4293b56d479432ec5175922d6885 /ldap/db/50_base.conf.in
parenta5a0692af0038463fdf888cc55e1967b966d4b59 (diff)
Make slapd.conf from snippets, and more...
Diffstat (limited to 'ldap/db/50_base.conf.in')
-rw-r--r--ldap/db/50_base.conf.in10
1 files changed, 10 insertions, 0 deletions
diff --git a/ldap/db/50_base.conf.in b/ldap/db/50_base.conf.in
new file mode 100644
index 0000000..b7cd9ae
--- /dev/null
+++ b/ldap/db/50_base.conf.in
@@ -0,0 +1,10 @@
+# The userPassword by default can be changed
+# by the entry owning it if they are authenticated.
+# Others should not be able to see it, except the
+# admin entry below
+access to dn.subtree="ou=SAM,@SUFFIX@" attrs=userpassword,shadowLastChange
+ by dn.exact="@ADMIN@" write
+ by dn.exact=”uid=cifsdc,ou=Entities,ou=Access Control,@SUFFIX@" write
+ by anonymous auth
+ by self write
+ by * none