summaryrefslogtreecommitdiffstats
path: root/zarb-ml/mageia-sysadm/2010-December/001266.html
diff options
context:
space:
mode:
Diffstat (limited to 'zarb-ml/mageia-sysadm/2010-December/001266.html')
-rw-r--r--zarb-ml/mageia-sysadm/2010-December/001266.html92
1 files changed, 92 insertions, 0 deletions
diff --git a/zarb-ml/mageia-sysadm/2010-December/001266.html b/zarb-ml/mageia-sysadm/2010-December/001266.html
new file mode 100644
index 000000000..0d55b3e78
--- /dev/null
+++ b/zarb-ml/mageia-sysadm/2010-December/001266.html
@@ -0,0 +1,92 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-sysadm] [634] - do not let user change their own memberOf attribute, ( even if the overlay may prevent it )
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20%5B634%5D%20-%20do%20not%20let%20user%20change%20their%20own%20memberOf%0A%20attribute%2C%20%28%20%20even%20if%20the%20overlay%20may%20prevent%20it%20%29&In-Reply-To=%3C20101216124949.A88D8403A4%40valstar.mageia.org%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="001265.html">
+ <LINK REL="Next" HREF="001267.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-sysadm] [634] - do not let user change their own memberOf attribute, ( even if the overlay may prevent it )</H1>
+ <B>root at mageia.org</B>
+ <A HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20%5B634%5D%20-%20do%20not%20let%20user%20change%20their%20own%20memberOf%0A%20attribute%2C%20%28%20%20even%20if%20the%20overlay%20may%20prevent%20it%20%29&In-Reply-To=%3C20101216124949.A88D8403A4%40valstar.mageia.org%3E"
+ TITLE="[Mageia-sysadm] [634] - do not let user change their own memberOf attribute, ( even if the overlay may prevent it )">root at mageia.org
+ </A><BR>
+ <I>Thu Dec 16 13:49:49 CET 2010</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="001265.html">[Mageia-sysadm] Puppet Report for valstar.mageia.org
+</A></li>
+ <LI>Next message: <A HREF="001267.html">[Mageia-sysadm] Puppet Report for krampouezh.mageia.org
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#1266">[ date ]</a>
+ <a href="thread.html#1266">[ thread ]</a>
+ <a href="subject.html#1266">[ subject ]</a>
+ <a href="author.html#1266">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>Revision: 634
+Author: misc
+Date: 2010-12-16 13:49:49 +0100 (Thu, 16 Dec 2010)
+Log Message:
+-----------
+- do not let user change their own memberOf attribute, ( even if the overlay may prevent it )
+
+Modified Paths:
+--------------
+ puppet/modules/openldap/templates/mandriva-dit-access.conf
+
+Modified: puppet/modules/openldap/templates/mandriva-dit-access.conf
+===================================================================
+--- puppet/modules/openldap/templates/mandriva-dit-access.conf 2010-12-16 11:44:22 UTC (rev 633)
++++ puppet/modules/openldap/templates/mandriva-dit-access.conf 2010-12-16 12:49:49 UTC (rev 634)
+@@ -113,10 +113,15 @@
+
+ # let the user change some of his/her attributes
+ access to dn.subtree=&quot;ou=People,&lt;%= dc_suffix %&gt;&quot;
+- attrs=carLicense,homePhone,homePostalAddress,mobile,pager,telephoneNumber,mail,preferredLanguage,sshPublicKey,memberOf
++ attrs=carLicense,homePhone,homePostalAddress,mobile,pager,telephoneNumber,mail,preferredLanguage,sshPublicKey
+ by self write
+ by users read
+
++access to dn.subtree=&quot;ou=People,&lt;%= dc_suffix %&gt;&quot;
++ attrs=memberOf
++ by users read
++
++
+ # create new accounts
+ access to dn.regex=&quot;^([^,]+,)?ou=(People|Group|Hosts),&lt;%= dc_suffix %&gt;$&quot;
+ attrs=children,entry
+-------------- next part --------------
+An HTML attachment was scrubbed...
+URL: &lt;/pipermail/mageia-sysadm/attachments/20101216/77ad8b90/attachment.html&gt;
+</PRE>
+
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="001265.html">[Mageia-sysadm] Puppet Report for valstar.mageia.org
+</A></li>
+ <LI>Next message: <A HREF="001267.html">[Mageia-sysadm] Puppet Report for krampouezh.mageia.org
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#1266">[ date ]</a>
+ <a href="thread.html#1266">[ thread ]</a>
+ <a href="subject.html#1266">[ subject ]</a>
+ <a href="author.html#1266">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-sysadm">More information about the Mageia-sysadm
+mailing list</a><br>
+</body></html>