3ca8ab45da
This is only executed on initial creation of the instance, the production one is using these fixed ACIs, this was only an issue with the setup The issue was the ACI was set at the wrong level
13 lines
446 B
Plaintext
13 lines
446 B
Plaintext
# kosmos.org
|
|
dn: dc=kosmos,dc=org
|
|
objectClass: top
|
|
objectClass: domain
|
|
dc: kosmos
|
|
aci: (target="ldap:///dc=kosmos,dc=org") (version 3.0; acl "user-deny-all"; deny (all) userdn="ldap:///dc=kosmos,dc=org";)
|
|
aci: (target="ldap:///dc=kosmos,dc=org")(targetattr="userPassword") (version 3.0; acl "user-write-own-password"; allow (write) userdn="ldap:///self";)
|
|
|
|
dn: ou=users,dc=kosmos,dc=org
|
|
objectClass: top
|
|
objectClass: organizationalUnit
|
|
ou: users
|