1 |
diff -Nur e-smith-ldap-5.4.0/root/etc/e-smith/templates/etc/openldap/slapd.conf/95acls60sensibleObjects e-smith-ldap-5.4.0_bz8000/root/etc/e-smith/templates/etc/openldap/slapd.conf/95acls60sensibleObjects |
2 |
--- e-smith-ldap-5.4.0/root/etc/e-smith/templates/etc/openldap/slapd.conf/95acls60sensibleObjects 2013-02-13 16:21:50.000000000 +0100 |
3 |
+++ e-smith-ldap-5.4.0_bz8000/root/etc/e-smith/templates/etc/openldap/slapd.conf/95acls60sensibleObjects 2013-11-12 18:50:47.637883802 +0100 |
4 |
@@ -1,12 +1,12 @@ |
5 |
# Anonymous users should only be able to see SME users and groups for addressbook purpose |
6 |
# Prevent access to system, dummy and machine accounts |
7 |
|
8 |
-access to dn.subtree=ou=Users,{ esmith::util::ldapBase ($DomainName); } filter=(!(objectClass=inetOrgPerson)) |
9 |
+access to dn.children=ou=Users,{ esmith::util::ldapBase ($DomainName); } filter=(!(objectClass=inetOrgPerson)) |
10 |
by users peername.ip="127.0.0.1" read |
11 |
by users ssf=128 read |
12 |
by anonymous none |
13 |
|
14 |
-access to dn.subtree=ou=Groups,{ esmith::util::ldapBase ($DomainName); } filter=(!(objectClass=mailboxRelatedObject)) |
15 |
+access to dn.children=ou=Groups,{ esmith::util::ldapBase ($DomainName); } filter=(!(objectClass=mailboxRelatedObject)) |
16 |
by users peername.ip="127.0.0.1" read |
17 |
by users ssf=128 read |
18 |
by anonymous none |