mallapadi niranjan wrote:

[snip]
> #access to dn.base="dc=msdpl,dc=com"
> access to attrs=sambaLMPassword,sambaNTPassword
>         by dn="uid=.*,ou=People,dc=msdpl,dc=com" write
>         by dn="uid=.*,ou=Domain Admins,dc=msdpl,dc=com" read
>         by * none
> access to attr=userPassword
>         by dn="uid=.*,ou=People,dc=msdpl,dc=com" write
>         by self write
>         by anonymous auth
>         by * none
> access to *
>         by * read
I don't understand this, you give *everyone* in the People container
write access to *all* passwords and those in ou=Domain Admins only read
access...?

confused
 Paul

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to