Hi, I understand the general rule for ordering ACLs, but the application still sometimes throws me.
In my people hierarchy, I need several attributes to be visible to
anonymous connections: uid and mail. Here's my original set of ACLs:
access to dn.one="ou=people,o=linfield.edu"
attrs=userpassword
by anonymous auth
access to dn.one="ou=people,o=linfield.edu"
by dn="cn=Postfix,ou=Special Users,o=linfield.edu" read
by group/linfieldGroupOfUniqueNames/uniqueMember="cn=ferpa
administrators,ou=People,o=linfield.edu" read
by self read
access to dn.one="ou=people,o=linfield.edu"
attrs=userPassword,maillocaladdress,useDefaultAlias,spamDisposition,checkForDirtyWords
by self write
I have added the following ACL in every conceivable location (the top,
the bottom, and the two in-betweens) and I still can't access the fields
anonymously:
access to dn.one="ou=people,o=linfield.edu"
attrs=uid,mail
by * read
What am I doing wrong here?
Thanks,
Rob
--
Rob Tanner
UNIX Services Manager
Linfield College, McMinnville OR
smime.p7s
Description: S/MIME Cryptographic Signature
