ldapv3.pdf 7947KB Apr 17 2013 11:30:42 AM - mirror omadata

The ACI ACL (OpenLDAPaci)
In order to enable ACI you need to add it to the access control
lists defined in slapd.conf.
You may have traditional ACL's prior to the ACI ACL but once
an matching ACL entry containing ACI is specified no further
ACLs will be processed.
ACL's prior to the ACI entry will OVERRIDE ACI information.
access to attr=userPassword
by self write
by anonymous auth
by dn="cn=Manager,dc=Example,dc=Com" write
access to dn="(*.),ou=People,dc=Example,dc=Com"
by dn="cn=Manager,dc=Example,dc=Com" write
by aci write
by * none.
Traditional ACL applying
to userPassword attribute.
Enable ACI for all objects in
the organizational unit People.