I'm using the Debian Squeeze OpenLDAP. Where can I set ACLs? Isn't it possible to execute the access to directives with
ldapmodify? There's no
slapd.conf file in Debian, they use a
migrated from stackoverflow.com Apr 18 '11 at 10:28
This question came from our site for professional and enthusiast programmers.
From Debian Wiki:
So, OpenLDAP allow to configure itself dynamically through 'cn=config' tree.
You can list DN in cn=config and see something like this:
Attribute oclAccess is what you need.
Let's add new ACL rules to database dc=nodomain.
Create a ldif-file
Vu a la:
Procedure is very similar to procedure of changing password that I described in another question.
There are also two ways.
1) Editing config file. You need to find config file of your backend. Each ACL is defined as value of
Example ACL entry looks like that:
2) Second way: using
The entire contents of
Create a new file inside of
That should do it.* But be warned, that slapd's ACL structure can be difficult for the uninitiated. It's easy to do the wrong and/or unintended thing.
*Provided there aren't any sequence limitations (I don't know slapd that well, so you're on your own for that).
I'm not saying this is a solution but it might help you on your way :-)
I asked a similar question of serverfault.
I never got an answer , in the end I had to create a slapd.conf and convert it to the slapd dir using the following commands ( note this was on RHEL)
Remove the contents of the /etc/openldap/slapd.d/ directory:
Edit your custom slapd.conf file.
Run slaptest to check the validity of the configuration file and create a new slapd.d directory with your settings
Configure permissions on the new directory so ldap doesnt moan.
the start up your LDAP server.
I created a small script to run these commands every time I made a change to slapd.conf