Merge branch 'bugfix/ldap_invalid_aci' of kosmos/chef into master

Fix the invalid ACIs on initial creation
This is only executed on initial creation of the instance, the production one is using these fixed ACIs, this was only an issue with the setup The issue was the ACI was set at the wrong level
2020-04-21 11:22:50 +00:00 · 2020-04-20 19:00:28 +02:00
1 changed files with 8 additions and 2 deletions
--- a/site-cookbooks/kosmos-dirsrv/files/users.ldif
+++ b/site-cookbooks/kosmos-dirsrv/files/users.ldif
@@ -1,6 +1,12 @@
+# kosmos.org
+dn: dc=kosmos,dc=org
+objectClass: top
+objectClass: domain
+dc: kosmos
+aci: (target="ldap:///dc=kosmos,dc=org") (version 3.0; acl "user-deny-all"; deny (all) userdn="ldap:///dc=kosmos,dc=org";)
+aci: (target="ldap:///dc=kosmos,dc=org")(targetattr="userPassword") (version 3.0; acl "user-write-own-password"; allow (write) userdn="ldap:///self";)
+
 dn: ou=users,dc=kosmos,dc=org
 objectClass: top
 objectClass: organizationalUnit
 ou: users
-aci: (target="ldap:///dc=kosmos,dc=org") (version 3.0; acl "user-deny-all"; deny (all) userdn="ldap:///dc=kosmos,dc=org";)
-aci: (target="ldap:///dc=kosmos,dc=org")(targetattr="userPassword") (version 3.0; acl "user-write-own-password"; allow (write) userdn="ldap:///self";)
Author	SHA1	Message	Date
greg	4c1879b84e	Merge branch 'bugfix/ldap_invalid_aci' of kosmos/chef into master	2020-04-21 11:22:50 +00:00
Greg Karékinian	3ca8ab45da	Fix the invalid ACIs on initial creation This is only executed on initial creation of the instance, the production one is using these fixed ACIs, this was only an issue with the setup The issue was the ACI was set at the wrong level	2020-04-20 19:00:28 +02:00