From: Peter Palfrader <peter@palfrader.org>
Date: Mon, 14 May 2012 16:45:39 +0000 (+0200)
Subject: userdir-ldap-slapd.conf.in: explicitly list readable attributes.  End with 'by *... 
X-Git-Tag: userdir-ldap-0.3.85~61^2~1
X-Git-Url: https://git.adam-barratt.org.uk/?p=mirror%2Fuserdir-ldap.git;a=commitdiff_plain;h=dc0196b286265833cd2d220eb9de2e70ac391104

userdir-ldap-slapd.conf.in: explicitly list readable attributes.  End with 'by * none'.
---

diff --git a/debian/changelog b/debian/changelog
index b8327dd..a0e969c 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -68,7 +68,11 @@ userdir-ldap (0.3.80) UNRELEASED; urgency=low
     - add webPasswords
     - add mailPreserveSuffixSeperator
 
- -- Peter Palfrader <weasel@debian.org>  Wed, 11 Apr 2012 10:55:17 +0200
+  [ Peter Palfrader ]
+  * userdir-ldap-slapd.conf.in: explicitly list readable attributes.
+    End with 'by * none'.
+
+ -- Peter Palfrader <weasel@debian.org>  Mon, 14 May 2012 18:45:07 +0200
 
 userdir-ldap (0.3.79) unstable; urgency=low
 
diff --git a/userdir-ldap-slapd.conf.in b/userdir-ldap-slapd.conf.in
index 12a50be..1f4d58b 100644
--- a/userdir-ldap-slapd.conf.in
+++ b/userdir-ldap-slapd.conf.in
@@ -79,11 +79,13 @@ access to attrs=facsimileTelephoneNumber,telephoneNumber,postalAddress,postalCod
 	by dn.regex="uid=.*,ou=users,@@DN@@" read
 	by * none
 
-
 # rest is globally readable
-access to *
+access to access,accountComment,accountStatus,admin,allowedGroups,allowedHost,architecture,bandwidth,cn,comment,dc,description,disk,distribution,dn,dnsTTL,dnsZoneEntry,exportOptions,gecos,gid,gidNumber,homeDirectory,host,hostname,icqUin,ipHostNumber,ircNick,jabberJID,keyFingerPrint,labeledURI,mXRecord,machine,member,memory,mn,objectClass,ou,physicalHost,purpose,shadowExpire,shadowLastChange,shadowMax,shadowMin,shadowWarning,sn,sponsor,sponsor-admin,sshRSAHostKey,status,subGroup,supplementaryGid,uid,uidNumber
 	by * read
 
+access to *
+	by * none
+
 
 database hdb
 directory       "/var/lib/ldap-log"