From: Martin Zobel-Helas Date: Sat, 18 Aug 2012 16:15:29 +0000 (+0200) Subject: allow listmasters to write to the privateSub attribute X-Git-Tag: userdir-ldap-0.3.85~59 X-Git-Url: https://git.adam-barratt.org.uk/?p=mirror%2Fuserdir-ldap.git;a=commitdiff_plain;h=960e75f177d57a0038bb4d3f2da9097627e6a1fa allow listmasters to write to the privateSub attribute Signed-off-by: Martin Zobel-Helas --- diff --git a/userdir-ldap-slapd.conf.in b/userdir-ldap-slapd.conf.in index 66ac323..2ae78b3 100644 --- a/userdir-ldap-slapd.conf.in +++ b/userdir-ldap-slapd.conf.in @@ -47,6 +47,11 @@ access to filter="(!(supplementaryGid=adm))" attrs=keyFingerPrint by group="cn=Keyring Maintainers,ou=users,@@DN@@" write by * break +# allow listmasters to write to the privateSub attribute +access to attrs=privateSub + by group="cn=Listmasters,ou=users,@@DN@@" write + by * break + # allow users write access to an explicit subset of their fields access to attrs=c,l,loginShell,ircNick,labeledURI,icqUIN,jabberJID,onVacation,birthDate,mailDisableMessage,gender,emailforward,mailCallout,mailGreylisting,mailRBL,mailRHSBL,mailWhitelist,mailContentInspectionAction,mailDefaultOptions,facsimileTelephoneNumber,telephoneNumber,postalAddress,postalCode,loginShell,onVacation,privateSub,latitude,longitude,VoIP,userPassword,sudoPassword,webPassword,voipPassword,bATVToken by self write