debian/changelog for today's work
[mirror/userdir-ldap.git] / userdir-ldap-slapd.conf.in
index 9cfda02..554541d 100644 (file)
@@ -26,12 +26,18 @@ sizelimit 10000
 lastmod on
 
 # owner writeable
-access to attrs=userPassword,sshrsaauthkey
+access to attrs=userPassword,sudoPassword
        by group="cn=LDAP Administrator,ou=users,@@DN@@" write
        by dn="uid=sshdist,ou=users,@@DN@@"  write
        by self write
        by * compare
 
+access to attrs=sshrsaauthkey
+       by group="cn=LDAP Administrator,ou=users,@@DN@@" write
+       by dn="uid=sshdist,ou=users,@@DN@@"  write
+       by self read
+       by * compare
+
 # debian readable
 access to attrs=activity-pgp,activity-from,dnsZoneEntry
        by group="cn=LDAP Administrator,ou=users,@@DN@@" write