Re: [phpldapadmin-users] Giving privileges

2008-02-17 Thread Nathan Huesken
> How do I allow a user write to all entries below theirs? > http://www.openldap.org/faq/data/cache/653.html > > what you wanted ? yes, thanks a lot! Nathan - This SF.net email is sponsored by: Microsoft Defy all challenge

Re: [phpldapadmin-users] Giving privileges

2008-02-17 Thread Fabrice Eudes
Fabrice Eudes a écrit : > You need more and more precise rules: the self keyword is not enough. found something for you in the openldap FAQ: How do I allow a user write to all entries below theirs? http://www.openldap.org/faq/data/cache/653.html what you wanted ? -- Fabrice Eudes -

Re: [phpldapadmin-users] Giving privileges

2008-02-17 Thread Fabrice Eudes
Hi, It's nearly off-topic: we are talking about slapd.conf and not specifically about pla :-) Nathan Huesken a écrit : > It works. But if I set them to: > access to * >by self write >by users read >by anonymous auth > > So it seems, that it does not belong to ls, right? > How do I c

Re: [phpldapadmin-users] Giving privileges

2008-02-17 Thread Nathan Huesken
Hi, OK, if I set the privileges in slapd.conf to: access to * by self write by users write by anonymous auth It works. But if I set them to: access to * by self write by users read by anonymous auth (Which is the way I want them to be), the user "ls" can not create a "ou" under

Re: [phpldapadmin-users] Giving privileges

2008-02-17 Thread Fabrice Eudes
Nathan Huesken a écrit : > I am trying to setup an addressbook with ldap (and with the help of > phpldapadmin). I am completly new to ldap! I was also, not a long time ago :-) > But now I can not add entries to the addressbook as > "uid=ls,ou=users,dc=lonely-star,dc=org" (no privileges). > I tri

[phpldapadmin-users] Giving privileges

2008-02-17 Thread Nathan Huesken
Hi, I am trying to setup an addressbook with ldap (and with the help of phpldapadmin). I am completly new to ldap! The stucture looks like this: + img cn=Manager - img ou=users (1) - img uid=ls (1) - img ou=addressbook But no