[Freeipa-users] Limiting directory listing for all users in self service

[Petr Spacek]

On 18.5.2016 10:27, Marc Peiser wrote:
> Hi all,
> 
> We're busy rolling out freeipa internally and one thing we would like to
> limit is the ability for normal users to view all users in the directory
> via the self service portal. We only want the user to see their particular
> details. Is this possible?

This could theoretically be done using ACI in LDAP but please see
https://www.redhat.com/archives/freeipa-users/2016-March/msg00071.html
for elaborate discussion.

It would have significant consequences.

-- 
Petr^2 Spacek