Re: [Fedora-directory-users] disable anonymous binding

2007-05-14 Thread Ankur Agarwal
Create an ldif file like this: === dn:dc=example,dc=com changetype: modify replace: aci aci: (target ="ldap:///dc=example,dc=com";)(targetattr="*")(version 3.0; acl "Deny anonymous access"; deny (read, search, compare) userdn="ldap:///anyone";;) === Then run lda

Re: [Fedora-directory-users] disable anonymous binding

2007-05-14 Thread Tony
On 5/14/07, George Holbert <[EMAIL PROTECTED]> wrote: You will want to set up ACIs to allow the minimum necessary access. See: http://www.redhat.com/docs/manuals/dir-server/ag/7.1/acl.html Be prepared for some trial-and-error experimentation to learn how to implement your intended access policy.

Re: [Fedora-directory-users] disable anonymous binding

2007-05-14 Thread George Holbert
You will want to set up ACIs to allow the minimum necessary access. See: http://www.redhat.com/docs/manuals/dir-server/ag/7.1/acl.html Be prepared for some trial-and-error experimentation to learn how to implement your intended access policy. Good luck! -- George Tony wrote: Hi, I'm very new

[Fedora-directory-users] disable anonymous binding

2007-05-14 Thread Tony
Hi, I'm very new to FDS, but I have succeeeded in getting it up and running on top of CentOS 4.4, and have populated it with a basic list of users and their details. I've even got SSL working properly. Now I'd like to open port 636 to the outside world to let my users see the address list etc whi