foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ldap/server: Add ACL support for netgroups

Browse source
This commit is contained in:
Timo Makinen 2020-09-11 14:45:11 +00:00
parent 8a7ad72442
commit da549daaaa
1 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
roles/ldap/server/templates/slapd.conf.j2
View file

@ -168,6 +168,17 @@ access to dn.one=ou=People,{{ ldap_basedn }} attrs=loginShell
by users read by users read
by * none by * none
# allow reads to netgroups
# TODO: change that only sysadm + host certs can read
access to dn.sub=ou=Netgroup,ou=System,{{ ldap_basedn }}
by users read
by * none
# allow reads to ou=System object itself
access to dn.base=ou=System,{{ ldap_basedn }}
by users read
by * none
# block rest of queries to ou=System tree # block rest of queries to ou=System tree
access to dn.sub=ou=System,{{ ldap_basedn }} access to dn.sub=ou=System,{{ ldap_basedn }}
by * none by * none