Re: [Freeipa-users] anonymous LDAP attributes with IPA ipa-server-4.1

2015-10-29 Thread Martin Kosek
On 10/29/2015 12:06 AM, craig.li...@mypenguin.net.au wrote: Thanks it worked! For those also intersted in the settings; Permission: ldap_anonymous Bind Type Rule: anonymous Granted Rights: (I used) "read","search","compare" Subtree: cn=users,cn=accounts,dc=example,dc=com Extra target filter: (&(

Re: [Freeipa-users] anonymous LDAP attributes with IPA ipa-server-4.1

2015-10-28 Thread craig . linux
Thanks it worked! For those also intersted in the settings; Permission: ldap_anonymous Bind Type Rule: anonymous Granted Rights: (I used) "read","search","compare" Subtree: cn=users,cn=accounts,dc=example,dc=com Extra target filter: (&(objectclass=Person)(|(uid=*)(givenName=*))) Target DN: uid=*,

Re: [Freeipa-users] anonymous LDAP attributes with IPA ipa-server-4.1

2015-10-27 Thread Prashant Bapat
​Refer this doc https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/Linux_Domain_Identity_Authentication_and_Policy_Guide/index.html#server-access-controls ​ On 28 October 2015 at 11:11, Prashant Bapat wrote: > Making attributes anonymously readable is very simpl

Re: [Freeipa-users] anonymous LDAP attributes with IPA ipa-server-4.1

2015-10-27 Thread Prashant Bapat
Making attributes anonymously readable is very simple. You need to look into RBAC and define the permissions/privileges you need. On 28 October 2015 at 08:02, wrote: > Hi, > > We have recently updated from IPA 3 to IPA 4.1 and one of the changes in > security is what attributes are available for