Re: [Freeipa-users] anonymous LDAP attributes with IPA ipa-server-4.1

2015-10-29 Thread Martin Kosek
On 10/29/2015 12:06 AM, craig.li...@mypenguin.net.au wrote: Thanks it worked! For those also intersted in the settings; Permission: ldap_anonymous Bind Type Rule: anonymous Granted Rights: (I used) "read","search","compare" Subtree: cn=users,cn=accounts,dc=example,dc=com Extra target filter: (&(

Re: [Freeipa-users] anonymous LDAP attributes with IPA ipa-server-4.1

2015-10-28 Thread craig . linux
Thanks it worked! For those also intersted in the settings; Permission: ldap_anonymous Bind Type Rule: anonymous Granted Rights: (I used) "read","search","compare" Subtree: cn=users,cn=accounts,dc=example,dc=com Extra target filter: (&(objectclass=Person)(|(uid=*)(givenName=*))) Target DN: uid=*,

Re: [Freeipa-users] anonymous LDAP attributes with IPA ipa-server-4.1

2015-10-27 Thread Prashant Bapat
​Refer this doc https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/Linux_Domain_Identity_Authentication_and_Policy_Guide/index.html#server-access-controls ​ On 28 October 2015 at 11:11, Prashant Bapat wrote: > Making attributes anonymously readable is very simpl

Re: [Freeipa-users] anonymous LDAP attributes with IPA ipa-server-4.1

2015-10-27 Thread Prashant Bapat
Making attributes anonymously readable is very simple. You need to look into RBAC and define the permissions/privileges you need. On 28 October 2015 at 08:02, wrote: > Hi, > > We have recently updated from IPA 3 to IPA 4.1 and one of the changes in > security is what attributes are available for

[Freeipa-users] anonymous LDAP attributes with IPA ipa-server-4.1

2015-10-27 Thread craig . linux
Hi, We have recently updated from IPA 3 to IPA 4.1 and one of the changes in security is what attributes are available for the anonymous LDAP queries. Does anyone know how to edit the anonymous LDAP settings so that the following are available? mail: cr...@example.com postalCode: 3000 street: