I am working on implementing open ldap and I am having an issue with my acls.
At this point I want users to be able to authenticate and I want them to be
able to search through the directory, but only return the attributes that I
specify, and restrict attributes that I want restricted. slapacl returns what
I would expect, but an ldapsearch as a user is returning no data at all.
This is all I have for acls at this point.
access to attrs=userPassword
by self write
by anonymous auth
by * none
access to attrs=entry
by users read
access to attrs=mail,cn,l,telephoneNumber
by users read
access to attrs=mailhost
by users none
by anonymous none