From dc0196b286265833cd2d220eb9de2e70ac391104 Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Mon, 14 May 2012 18:45:39 +0200 Subject: [PATCH] userdir-ldap-slapd.conf.in: explicitly list readable attributes. End with 'by * none'. --- debian/changelog | 6 +++++- userdir-ldap-slapd.conf.in | 6 ++++-- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/debian/changelog b/debian/changelog index b8327dd..a0e969c 100644 --- a/debian/changelog +++ b/debian/changelog @@ -68,7 +68,11 @@ userdir-ldap (0.3.80) UNRELEASED; urgency=low - add webPasswords - add mailPreserveSuffixSeperator - -- Peter Palfrader Wed, 11 Apr 2012 10:55:17 +0200 + [ Peter Palfrader ] + * userdir-ldap-slapd.conf.in: explicitly list readable attributes. + End with 'by * none'. + + -- Peter Palfrader Mon, 14 May 2012 18:45:07 +0200 userdir-ldap (0.3.79) unstable; urgency=low diff --git a/userdir-ldap-slapd.conf.in b/userdir-ldap-slapd.conf.in index 12a50be..1f4d58b 100644 --- a/userdir-ldap-slapd.conf.in +++ b/userdir-ldap-slapd.conf.in @@ -79,11 +79,13 @@ access to attrs=facsimileTelephoneNumber,telephoneNumber,postalAddress,postalCod by dn.regex="uid=.*,ou=users,@@DN@@" read by * none - # rest is globally readable -access to * +access to access,accountComment,accountStatus,admin,allowedGroups,allowedHost,architecture,bandwidth,cn,comment,dc,description,disk,distribution,dn,dnsTTL,dnsZoneEntry,exportOptions,gecos,gid,gidNumber,homeDirectory,host,hostname,icqUin,ipHostNumber,ircNick,jabberJID,keyFingerPrint,labeledURI,mXRecord,machine,member,memory,mn,objectClass,ou,physicalHost,purpose,shadowExpire,shadowLastChange,shadowMax,shadowMin,shadowWarning,sn,sponsor,sponsor-admin,sshRSAHostKey,status,subGroup,supplementaryGid,uid,uidNumber by * read +access to * + by * none + database hdb directory "/var/lib/ldap-log" -- 2.20.1