[Fedora-directory-users] aci with group dn and self read

[Ivan Ferreira]

I think that you cannot use ldap:///self as target, and second, I don't
understand the relation between the group membership and "self" attribute
reading.

If you use target = * a allow (read,search) and userdn=ldap:///self you
would have the desired result. I mean, is supposed that every user should
be able to read its own attributes.

If you still need to do something like group and self attributes, probably
you need a targetfilter instead of target.



                                                                           
                                                                           
                                                                           
                                                                      Para 
                                          fedora-directory-users at redhat.co 
                                          m                                
       "C.S.R.C.Murthy"                                                 cc 
       <murthy at barc.gov.in>                                                
       Enviado por:                                                 Asunto 
       fedora-directory-users-b           [Fedora-directory-users] aci     
       ounces at redhat.com                  with group dn and self read      
                                                             Clasificación 
       17/04/2008 01:46 a.m.             Uso Interno                       
                                                                           
                                                                           
                                                                           
        Por favor, responda a                                              
       "General discussion list                                            
       for the Fedora Directory                                            
           server project."                                                
       <fedora-directory-users@                                            
             redhat.com>                                                   
                                                                           
                                                                           




Hello,

I need an aci such that when a user of a group binds, he will be able to
see only his attribute but not others. I tried the following but it
gives syntax error. Please suggest

(target = "ldap:///self") (targetattr = "*") (version = 3.0; acl "test
acl"; allow (read,search) (groupdn =
"ldap:///cn=internet,ou=groups,dc=example,dc=com") ; )

-thanks
murthy

--
Fedora-directory-users mailing list
Fedora-directory-users at redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users


========================================================================================
AVISO LEGAL: Esta información es privada y confidencial y está dirigida
únicamente a su destinatario. Si usted no es el destinatario original de
este mensaje y por este medio pudo  acceder a dicha información por favor
elimine el mensaje. La distribución o copia de este mensaje está
estrictamente prohibida. Esta comunicación es sólo para  propósitos de
información y no debe ser considerada como propuesta, aceptación ni como
una declaración de voluntad oficial de NUCLEO S.A.  La transmisión de
e-mails no garantiza que el correo electrónico sea seguro o libre de error.
Por consiguiente, no manifestamos que esta información sea completa o
precisa.  Toda información está sujeta a alterarse sin previo aviso.

 This information is private and confidential and intended for the
recipient only. If you are not the intended recipient of this message you
are hereby notified that any review,  dissemination, distribution or
copying of this message is strictly prohibited. This communication is for
information purposes only and shall not be regarded neither as a proposal,
acceptance nor as a statement of will or official statement from NUCLEO
S.A. . Email transmission cannot be guaranteed to be secure or error-free.
Therefore,  we do not represent that this information is complete or
accurate and it should not be relied upon as such. All information is
subject to change without notice.