summaryrefslogtreecommitdiffstats
path: root/confskel/openldap/ldif/olcDatabase.ldif
diff options
context:
space:
mode:
authorTimothy Pearson <[email protected]>2012-06-03 00:03:24 -0500
committerTimothy Pearson <[email protected]>2012-06-03 00:03:24 -0500
commitc39d52d4c9425c45394105bebdd6f2fac29569ee (patch)
treee83eeaf9efbb96e9341cc40137830a0b720814b4 /confskel/openldap/ldif/olcDatabase.ldif
parentb6e7d7b5155c2aee53b9ec2306a4400acc7c325f (diff)
downloadkcmldapcontroller-c39d52d4c9425c45394105bebdd6f2fac29569ee.tar.gz
kcmldapcontroller-c39d52d4c9425c45394105bebdd6f2fac29569ee.zip
Realm is now almost fully online
Diffstat (limited to 'confskel/openldap/ldif/olcDatabase.ldif')
-rw-r--r--confskel/openldap/ldif/olcDatabase.ldif3
1 files changed, 2 insertions, 1 deletions
diff --git a/confskel/openldap/ldif/olcDatabase.ldif b/confskel/openldap/ldif/olcDatabase.ldif
index db82473..90e841b 100644
--- a/confskel/openldap/ldif/olcDatabase.ldif
+++ b/confskel/openldap/ldif/olcDatabase.ldif
@@ -11,7 +11,8 @@ olcAccess: {0}to attrs=userPassword,shadowLastChange,krb5Key,krb5PrincipalName
olcAccess: {1}to dn.base="" by * read
olcAccess: {2}to * by dn.base="uid=@@@ADMINUSER@@@,ou=users,ou=core,ou=realm
,@@@REALM_DCNAME@@@" write by sockurl.regex="^ldapi:///$" write by dynacl/ac
- i write
+ i write by group/groupOfNames/member.exact="cn=@@@ADMINGROUP@@@,ou=groups,ou
+ =core,ou=realm,@@@REALM_DCNAME@@@" write
olcAddContentAcl: FALSE
olcLastMod: TRUE
olcMaxDerefDepth: 15