X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=userdir-ldap-slapd.conf.in;h=554541dcab1af90d6db532fd48f40d7c1c792ab3;hb=480ae4d6dbb4efa7d73cc70ca8598cf0841df670;hp=9cfda02692158c65519b468937d62b4d4b502715;hpb=91e87667ac77b0814130822608305c7c689e815f;p=mirror%2Fuserdir-ldap.git

diff --git a/userdir-ldap-slapd.conf.in b/userdir-ldap-slapd.conf.in
index 9cfda02..554541d 100644
--- a/userdir-ldap-slapd.conf.in
+++ b/userdir-ldap-slapd.conf.in
@@ -26,12 +26,18 @@ sizelimit 10000
 lastmod on
 
 # owner writeable
-access to attrs=userPassword,sshrsaauthkey
+access to attrs=userPassword,sudoPassword
 	by group="cn=LDAP Administrator,ou=users,@@DN@@" write
 	by dn="uid=sshdist,ou=users,@@DN@@"  write
 	by self write
 	by * compare
 
+access to attrs=sshrsaauthkey
+	by group="cn=LDAP Administrator,ou=users,@@DN@@" write
+	by dn="uid=sshdist,ou=users,@@DN@@"  write
+	by self read
+	by * compare
+
 # debian readable
 access to attrs=activity-pgp,activity-from,dnsZoneEntry
 	by group="cn=LDAP Administrator,ou=users,@@DN@@" write