Re: OpenLDAP - jak pridat uzivateli prava zapisu na OU

Zdrav=EDm.

Mysl=EDm si, =BEe ve specifikaci komu pr=E1vo n=E1le=BE=ED by m=EClo b=FDt
dn.regex "cn=3Duzivatel.......$"

S dovolen=EDm bych to d=EClal jinak. U=BEivatele s pr=E1vem z=E1pisu
bych dal do skupiny (objectClass: groupOfNames)
a do pr=E1v bych zadal:

by group.expand=3D"cn=3Dskupina,......,dc=3Dxxx,dc=3Dcz" write nebo manage

Pro "access" bych nepou=BEil *, ale =

access to dn.regex=3D"dc=3Dxxx,dc=3Dcz$"


Pavel Just

Petr Simek p=ED=B9e v =C8t 14. 11. 2019 v 14:29 +0100:
> Dobry den
> =

> zapolim ponekud s openldap 2.4 . Mam v nem zatim vytvoreny polozky
> =

> dn: dc=3Dxxx,dc=3Dcz
> dn: cn=3DManager,dc=3Dxxx,dc=3Dcz
> dn: ou=3DPeople,dc=3Dxxx,dc=3Dcz
> dn: cn=3Duzivatel,dc=3Dxxx,dc=3Dcz
> =

> Zaznam cn=3DManager,dc=3Dxxx,dc=3Dcz je v konfiguraci veden jako olcRootDN
> .
> =

> Ja bych chtel aby cn=3Duzivatel,dc=3Dxxx,dc=3Dcz mel prava vytvaret
> a mazat zaznamy v ou=3DPeople,dc=3Dxxx,dc=3Dcz ale nemuzu prijit na to jak
> mu spravne pridat prava - pise mi to
> =

>     ldap_add: Insufficient access (50)
>            additional info: no write access to parent
> =

> Kdyz to pridani/mazani spoustim pod cn=3DManager,dc=3Dxxx,dc=3Dcz tak to
> funguje.
> =

> Poradte mi - co a kam bych mel nastavit pro cn=3Duzivatel,dc=3Dxxx,dc=3Dcz
> aby ziskal prava zapisu na tu ou=3DPeople,dc=3Dxxx,dc=3Dcz .
> =

> Ve starsim OpenLDAPu byl v konfiguraku zaznam
> =

>     access to *
>          by dn=3D"cn=3DManager,dc=3Dxxx,dc=3Dcz" write
>          by dn=3D"cn=3Duzivatel,dc=3Dxxx,dc=3Dcz" write
>          by * read
> =

> a normalne to funguje. Jenze v tom novem OpenLDAPu jsou ty zapisy
> nejak komplikovanejsi a navody podle kterych jsem neco zkousel mi
> nevedou k vysledku.
> =

> =

> =

> *------------------------------------------------------------------
> ------*
> >                          Petr Simek   APS
> > JU                           |
> >                             [email protected]                          =

> >     |
> =

> *------------------------------------------------------------------
> ------*
> _______________________________________________
> Linux mailing list
> [email protected]
> http://www.linux.cz/mailman/listinfo/linux
_______________________________________________
Linux mailing list
[email protected]
http://www.linux.cz/mailman/listinfo/linux