Hi Emmanuell,

thanks for the tip. I want to run the server in anonymous mode, but it should 
not be possible to add entries in ou=system. How can I prevent this?


Thx

Ado

________________________________
Von: Emmanuel Lécharny <[email protected]>
Gesendet: Dienstag, Oktober 13, 2020 11:03 PM
An: [email protected]
Betreff: Re: How to prevent write access in ou=system as anonymous user?

Hi!


this is described on
http://directory.apache.org/apacheds/basic-ug/1.4.5-anonymous-access.html


If you want to set this option without using Studio, you just have to
set the *ads-dsAllowAnonymousAccess *attribute value to *FALSE*. Note
that is the default. You'll fin dthis attribbute under the ou=config,
ads-directoryServiceId=XXXXX entry.


Hope this help.
**



On 13/10/2020 18:57, Ado Dao wrote:
> Hi
>
> I have implemented a custom partition with Java. The partition
> intercepts the LDAP search requests and redirects to an internal
> logic. Currently, this runs in anonymous mode. With LDAP client it is
> possible to add entries in ou=system. e.g. cn=test, ou=system. How can
> I prevent that this is possible in anonymous mode?
>
> thx
> Ado

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to