X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=userdir-ldap-slapd.conf.in;h=63ccf7f7a3bc926c7ee246a8aa138418c288b608;hb=89ff993193164fbc1c8722e948e9759a2db7c6a2;hp=2ae78b3c14ee74af08ab091f967125acac23a677;hpb=960e75f177d57a0038bb4d3f2da9097627e6a1fa;p=mirror%2Fuserdir-ldap.git diff --git a/userdir-ldap-slapd.conf.in b/userdir-ldap-slapd.conf.in index 2ae78b3..63ccf7f 100644 --- a/userdir-ldap-slapd.conf.in +++ b/userdir-ldap-slapd.conf.in @@ -50,10 +50,11 @@ access to filter="(!(supplementaryGid=adm))" attrs=keyFingerPrint # allow listmasters to write to the privateSub attribute access to attrs=privateSub by group="cn=Listmasters,ou=users,@@DN@@" write + by self write by * break # allow users write access to an explicit subset of their fields -access to attrs=c,l,loginShell,ircNick,labeledURI,icqUIN,jabberJID,onVacation,birthDate,mailDisableMessage,gender,emailforward,mailCallout,mailGreylisting,mailRBL,mailRHSBL,mailWhitelist,mailContentInspectionAction,mailDefaultOptions,facsimileTelephoneNumber,telephoneNumber,postalAddress,postalCode,loginShell,onVacation,privateSub,latitude,longitude,VoIP,userPassword,sudoPassword,webPassword,voipPassword,bATVToken +access to attrs=c,l,loginShell,ircNick,labeledURI,icqUIN,jabberJID,onVacation,birthDate,mailDisableMessage,gender,emailforward,mailCallout,mailGreylisting,mailRBL,mailRHSBL,mailWhitelist,mailContentInspectionAction,mailDefaultOptions,facsimileTelephoneNumber,telephoneNumber,postalAddress,postalCode,loginShell,onVacation,latitude,longitude,VoIP,userPassword,sudoPassword,webPassword,rtcPassword,bATVToken by self write by * break @@ -63,7 +64,7 @@ access to attrs=c,l,loginShell,ircNick,labeledURI,icqUIN,jabberJID,onVacation,bi ## # allow authn/z by anyone -access to attrs=userPassword,sudoPassword,webPassword,voipPassword,bATVToken +access to attrs=userPassword,sudoPassword,webPassword,rtcPassword,bATVToken by * compare # readable only by self