Re: [Freeipa-users] Restricting other User's Details to be visible to a user

2013-02-13 Thread Rob Crittenden
Rajnesh Kumar Siwal wrote: Yes. We would still like to restrict the Visibility of the users. We could implement the ACL's in 389-ds. However, I was concerned whether it breaks the IPA. To disable anonymous you need to set nsslapd-allow-anonymous-access to off in cn=config (bind as Directory M

Re: [Freeipa-users] Restricting other User's Details to be visible to a user

2013-02-13 Thread Rajnesh Kumar Siwal
Yes. We would still like to restrict the Visibility of the users. We could implement the ACL's in 389-ds. However, I was concerned whether it breaks the IPA. -- Regards, Rajnesh Kumar Siwal ___ Freeipa-users mailing list Freeipa-users@redhat.com https:

Re: [Freeipa-users] Restricting other User's Details to be visible to a user

2013-02-13 Thread Petr Spacek
On 13.2.2013 11:38, Rajnesh Kumar Siwal wrote: It has been found that any user can see the details of other users through the IPA Web Interface (even ldapsearch with anonymous user). It would be great if we could hide the details of the other users from the current user (including emai, phone num

[Freeipa-users] Restricting other User's Details to be visible to a user

2013-02-13 Thread Rajnesh Kumar Siwal
It has been found that any user can see the details of other users through the IPA Web Interface (even ldapsearch with anonymous user). It would be great if we could hide the details of the other users from the current user (including emai, phone number, Licence Number). Additionally, anonymous acc