LDAPD attribute and ACL'S

2014-07-25 Thread Bambero 
Hi

Is it possibile to give write access only for userPassword field ?

sth like:

allow write access to attr=userPassword by self

Regards
Bambero

Re: LDAPD attribute and ACL'S

2014-07-25 Thread Matthew Weigel 

On 07/25/2014 05:48 AM, Bambero wrote:

Hi

Is it possibile to give write access only for userPassword field ?

sth like:

allow write access to attr=userPassword by self


There are no per-attribute permissions in the base ldapd(8).

I think the 'normal' way to accomplish this is to create a user
who does have write permission to users' entries, and then write
a program that will authenticate as that DN to modify passwords
on users' behalf.
--
 Matthew Weigel
 hacker
 unique  idempot . ent