Hie

On Wed, May 23, 2012 at 3:49 AM, Lucas Sweany <[email protected]> wrote:

> Well I definitely don't need that. It looks like I will end up writing a
> script to delete or overwrite the attribute for now.
>
> Thanks,
>
> -Lucas


If you are concerned about other user reading unhashed#user#password for
other users, Setup below aci on your rootdn.

aci: (targetattr = "unhashed#user#password") (version 3.0;acl "Block
the unhashed password";deny (read,compare,search)(userdn =
"ldap:///anyone";);)

Regards
Arpit Tolani
--
389 users mailing list
[email protected]
https://admin.fedoraproject.org/mailman/listinfo/389-users

Reply via email to