crans/crans_bcfg2
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Changements d'ACLs pour les replicas

Browse source
This commit is contained in:
Pierre-Elliott Bécue 2015-08-26 20:21:42 +02:00
parent e21b67c6cc
commit 1a8b016a1a
1 changed files with 16 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

34
Python/etc/ldap/templatedir/cn=config/olcDatabase={1}bdb.ldif
View file

@ -12,33 +12,31 @@ rid = str(int(rid[rid.rfind(".")+1:])+255)
@objectClass: olcBdbConfig
@olcDatabase: {1}bdb
@olcSuffix: dc=crans,dc=org
@olcAccess: {0}to attrs=userPassword by dn.regex="cn=replica,dc=crans,dc=org"
@ write by dn.regex="cn=dovecot,dc=crans,dc=org" read by anonymous auth by s
@ elf write by * none
@olcAccess: {1}to dn.base="" by * read
@olcAccess: {2}to dn.regex="^(a|c)id=[0-9]+,ou=data,dc=crans,dc=org$$" attrs=m
@olcAccess: {0}to * by dn.exact="cn=replica,dc=crans,dc=org" write by dn.exac
@ t="cn=readonly,dc=crans,dc=org" read by sockname.regex="ldapi" read by self
@ read by * +0 break
@olcAccess: {1}to attrs=userPassword by dn.exact="cn=dovecot,dc=crans,dc=org"
@ read by anonymous auth by self write by * none
@olcAccess: {2}to dn.base="" by * read
@olcAccess: {3}to dn.regex="^(a|c)id=[0-9]+,ou=data,dc=crans,dc=org$$" attrs=m
@ ailAlias,canonicalAlias,uid,mail,entry,objectClass,contourneGreylist,rewriteM
@ ailHeaders,shadowExpire by dn.regex="cn=postfix,dc=crans,dc=org" read by *
@ ailHeaders,shadowExpire by dn.exact="cn=postfix,dc=crans,dc=org" read by *
@ +0 break
@olcAccess: {3}to dn.regex="^(a|c)id=[0-9]+,ou=data,dc=crans,dc=org$$" attrs=u
@ id,entry,objectClass,shadowExpire by dn.regex="cn=intranet,dc=crans,dc=org"
@ read by * +0 break
@olcAccess: {4}to dn.regex="^(a|c)id=[0-9]+,ou=data,dc=crans,dc=org$$" attrs=u
@ id,entry,objectClass,shadowExpire by dn.exact="cn=intranet,dc=crans,dc=org"
@ read by * +0 break
@olcAccess: {5}to dn.regex="^(a|c)id=[0-9]+,ou=data,dc=crans,dc=org$$" attrs=u
@ id,homeDirectory,uidNumber,gidNumber,userPassword,objectClass,entry,shadowExp
@ ire by dn.regex="cn=dovecot,dc=crans,dc=org" read by * +0 break
@olcAccess: {5}to * by group/labeledURIObject/labeledURI.exact="cn=adm,ou=grou
@ ire by dn.exact="cn=dovecot,dc=crans,dc=org" read by * +0 break
@olcAccess: {6}to * by group/labeledURIObject/labeledURI.exact="cn=adm,ou=grou
@ p,dc=crans,dc=org" write by group/labeledURIObject/labeledURI.exact="cn=resp
@ bats,ou=group,dc=crans,dc=org" read by * +0 break
@olcAccess: {6}to dn.regex="^(a|c)id=[0-9]+,ou=data,dc=crans,dc=org$$" attrs=u
@olcAccess: {7}to dn.regex="^(a|c)id=[0-9]+,ou=data,dc=crans,dc=org$$" attrs=u
@ id,homeDirectory,uidNumber,gidNumber,gecos,objectClass,entry by anonymous re
@ ad by * +0 break
@olcAccess: {7}to dn.base="ou=data,dc=crans,dc=org" by anonymous search by dn
@olcAccess: {8}to dn.base="ou=data,dc=crans,dc=org" by anonymous search by dn
@ .regex="cn=(postfix|intranet|dovecot),dc=crans,dc=org" search by * +0 break
@olcAccess: {8}to dn.subtree="ou=group,dc=crans,dc=org" by anonymous read by
@ * +0 break
@olcAccess: {9}to * by dn.regex="cn=admin,dc=crans,dc=org" write by dn.regex=
@ "cn=replica,dc=crans,dc=org" write by sockname.regex="ldapi" read by dn.reg
@ ex="cn=readonly,dc=crans,dc=org" read by self read by * none
@olcAccess: {9}to dn.subtree="ou=group,dc=crans,dc=org" by anonymous read
@olcAddContentAcl: FALSE
@olcLastMod: TRUE
@olcMaxDerefDepth: 15