Hello,

Would someone mind taking a look at the below and tell me what I am missing??  
I have a requirement to make a group readable by its members:



morgan@m1macbook ~ % ldapmodify -H ldaps://prdds22.domain.org -x -y pass.txt -f 
duo_aci_example.ldif
modifying entry "cn=vpnall,ou=vpnaccess,ou=groups,dc=domain,dc=org"
ldap_modify: Invalid syntax (21)
        additional info: ACL Syntax Error(-5):(target = 
\22cn=vpnall,ou=vpnaccess,ou=groups,dc=domain,dc=org\22)(targetfilter = 
\22(objectclass=groupofuniquenames)\22)(version 3.0; acl \22duo access\22;allow 
(read, search, compare) groupdn = 
\22ldap:///cn=vpnall,ou=vpnaccess,ou=groups,dc=domain,dc=org\22;)


morgan@m1macbook ~ % 


duo_aci_example.ldif:
dn: cn=vpnall,ou=vpnaccess,ou=groups,dc=domain,dc=org
changetype: modify
replace: aci
aci: (target = "cn=vpnall,ou=vpnaccess,ou=groups,dc=domain,dc=org")
 (targetfilter = "(objectclass=groupofuniquenames)")
 (version 3.0; acl "duo access";
 allow (read, search, compare) groupdn = 
"ldap:///cn=vpnall,ou=vpnaccess,ou=groups,dc=domain,dc=org";;)


thank you!

-morgan
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to