OpenLDAP: ACL and binddn when dn contains non-ascii chars

Erik Norgaard norgaard at locolomo.org
Wed Apr 26 07:42:41 UTC 2006


Hi:

I'm trying to build my address book, now since my own name contains
non-ascii characters, my cn becomes

cn:: RXJpayBOw7hyZ2FhcmQ=

I wish to restrict access so that each person can edit his own details,
but not search the entire directory, something like this should do:

# Access Control:
access to attrs=userPassword
     by self write
     by anonymous auth
     by * none
access to *
     by self write
     by dn.base="cn=<myname>,ou=people,dc=domain,dc=tld" read
     by * none

But what do I put in place of "cn=<myname>"?

2nd: For now, I have,

access to *
     by self write
     by users read
     by * none

But, what do I set as binddn? I am using the address book with
Thunderbird and I don't know if it is smart enough to convert iso chars
to utf-8.

Thanks, Erik
-- 
Ph: +34.666334818                                  web: www.locolomo.org
S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F0C.crt
Subject ID:  69:79:B8:2C:E3:8F:E7:BE:5D:C3:C3:B1:74:62:B8:3F:9F:1F:69:B9
Fingerprint: 7F:80:96:EA:95:92:E2:23:1F:FA:0F:98:92:C2:CC:55:6B:9A:8C:92


More information about the freebsd-questions mailing list