Public bug reported: Binary package hint: ubuntu-docs
Ubuntu Documentation > Ubuntu 9.10 > Ubuntu Server Guide > Network Authentication > OpenLDAP Server http://doc.ubuntu.com/ubuntu/serverguide/C/openldap-server.html In the "Setting up ACL" section of the current draft I believe the proposed configuration is not enought to get a satisfying setup (ie. one that does not ask user to change her password at each logins: "You are required to change your password immediately (password aged)") >From the current doc: olcAccess: {0}to attrs=userPassword,shadowLastChange by dn="cn=admin,dc=example,dc=com" write by anonymous auth by self write by * none olcAccess: {1}to dn.base="" by * read olcAccess: {2}to * by dn="cn=admin,dc=example,dc=com" write by * read A working conf: olcAccess: {0}to attrs=userPassword by dn="cn=admin,dc=example,dc=com" write by anonymous auth by self write by * none olcAccess: {1}to attrs=shadowLastChange by self write by * read olcAccess: {2}to dn.base="" by * read olcAccess: {3}to * by dn="cn=admin,dc=example,dc=com" write by * read See: https://bugzilla.redhat.com/show_bug.cgi?id=199188#c2 ** Affects: ubuntu-docs (Ubuntu) Importance: Undecided Status: New -- OpenLDAP Server: shadowLastChange should be readeable for all https://bugs.launchpad.net/bugs/511090 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
