Re: LDAPD attribute and ACL'S

[Matthew Weigel]

On 07/25/2014 05:48 AM, Bambero wrote:

Hi

Is it possibile to give write access only for userPassword field ?

sth like:

allow write access to attr=userPassword by self

There are no per-attribute permissions in the base ldapd(8).

I think the 'normal' way to accomplish this is to create a user
who does have write permission to users' entries, and then write
a program that will authenticate as that DN to modify passwords
on users' behalf.
--
 Matthew Weigel
 hacker
 unique & idempot . ent