e-smith-ldap/sme9/e-smith-ldap-5.4.0-adjust_slapd_acl.patch

diff -Nur e-smith-ldap-5.4.0/root/etc/e-smith/templates/etc/openldap/slapd.conf/95acls60sensibleObjects e-smith-ldap-5.4.0_bz8000/root/etc/e-smith/templates/etc/openldap/slapd.conf/95acls60sensibleObjects
--- e-smith-ldap-5.4.0/root/etc/e-smith/templates/etc/openldap/slapd.conf/95acls60sensibleObjects       2013-02-13 16:21:50.000000000 +0100
+++ e-smith-ldap-5.4.0_bz8000/root/etc/e-smith/templates/etc/openldap/slapd.conf/95acls60sensibleObjects        2013-11-12 18:50:47.637883802 +0100
@@ -1,12 +1,12 @@
 # Anonymous users should only be able to see SME users and groups for addressbook purpose
 # Prevent access to system, dummy and machine accounts
 
-access to dn.subtree=ou=Users,{ esmith::util::ldapBase ($DomainName); } filter=(!(objectClass=inetOrgPerson))
+access to dn.children=ou=Users,{ esmith::util::ldapBase ($DomainName); } filter=(!(objectClass=inetOrgPerson))
         by users       peername.ip="127.0.0.1" read
         by users       ssf=128 read
         by anonymous   none
 
-access to dn.subtree=ou=Groups,{ esmith::util::ldapBase ($DomainName); } filter=(!(objectClass=mailboxRelatedObject))
+access to dn.children=ou=Groups,{ esmith::util::ldapBase ($DomainName); } filter=(!(objectClass=mailboxRelatedObject))
         by users        peername.ip="127.0.0.1" read
         by users        ssf=128 read
         by anonymous   none
1	diff -Nur e-smith-ldap-5.4.0/root/etc/e-smith/templates/etc/openldap/slapd.conf/95acls60sensibleObjects e-smith-ldap-5.4.0_bz8000/root/etc/e-smith/templates/etc/openldap/slapd.conf/95acls60sensibleObjects
2	--- e-smith-ldap-5.4.0/root/etc/e-smith/templates/etc/openldap/slapd.conf/95acls60sensibleObjects 2013-02-13 16:21:50.000000000 +0100
3	+++ e-smith-ldap-5.4.0_bz8000/root/etc/e-smith/templates/etc/openldap/slapd.conf/95acls60sensibleObjects 2013-11-12 18:50:47.637883802 +0100
4	@@ -1,12 +1,12 @@
5	# Anonymous users should only be able to see SME users and groups for addressbook purpose
6	# Prevent access to system, dummy and machine accounts
7
8	-access to dn.subtree=ou=Users,{ esmith::util::ldapBase ($DomainName); } filter=(!(objectClass=inetOrgPerson))
9	+access to dn.children=ou=Users,{ esmith::util::ldapBase ($DomainName); } filter=(!(objectClass=inetOrgPerson))
10	by users peername.ip="127.0.0.1" read
11	by users ssf=128 read
12	by anonymous none
13
14	-access to dn.subtree=ou=Groups,{ esmith::util::ldapBase ($DomainName); } filter=(!(objectClass=mailboxRelatedObject))
15	+access to dn.children=ou=Groups,{ esmith::util::ldapBase ($DomainName); } filter=(!(objectClass=mailboxRelatedObject))
16	by users peername.ip="127.0.0.1" read
17	by users ssf=128 read
18	by anonymous none