ubuntu 12.04 - Need help in configuring LDAP acl -


i trying configure acl in such way users attribute allowedservice application name can login particular application.

we have users follows:

dn: ou=people,dc=prime,dc=ds,dc=geo,dc=com  dn: uid=user1,ou=people,dc=prime,dc=ds,dc=geo,dc=com uid: user1 allowedservice: gitlab  dn: uid=user2,ou=people,dc=prime,dc=ds,dc=geo,dc=com uid: user2 allowedservice: zabbix  dn: uid=user3,ou=people,dc=prime,dc=ds,dc=geo,dc=com objectclass: top uid: user3 allowedservice: zabbix

we created user follows:

dn: cn=gitlab,ou=applications,ou=groups,dc=prime,dc=ds,dc=geo,dc=com cn: gitlab uid: gitlab

now in application given details follows: gitlab configuration

base: ou=people,dc=prime,dc=ds,dc=geo,dc=com uid: uid bind_dn: cn=gitlab,ou=applications,ou=groups,dc=prime,dc=ds,dc=geo,dc=com password: password

now in acl tried various options follows:

root@geopc:/# ldapsearch -q -lll -y external -h ldapi:/// -b cn=config '(olcdatabase={1}hdb)' olcaccess dn: olcdatabase={1}hdb,cn=config olcaccess: {0}to attrs=userpassword,shadowlastchange self write anonymous auth dn="cn=admin,dc=ds,dc=geo,dc=com" write * none olcaccess: {1}to dn.base="" * read olcaccess: {2}to dn.subtree="ou=applications,ou=groups,dc=prime,dc=ds,dc=geo,dc=com" self write * write olcaccess: {3}to dn.subtree="ou=people,dc=prime,dc=ds,dc=geo,dc=com" self write * auth olcaccess: {4}to dn.subtree="ou=people,dc=prime,dc=ds,dc=geo,dc=com" filter="(allowedservice=gitlab)" dn.exact="cn=gitlab,ou=applications,ou=groups,dc=prime,dc=ds,dc=geo,dc=com" write self write

but no user can able login. change olcaccess: {3}to dn.subtree="ou=people,dc=prime,dc=ds,dc=geo,dc=com" self write * write , users can login.

but need user1 need login gitlab application. , users user2 , user3 need login zabbix application

can please me configure acl this. in advance.

thanks

geo

this not acls for. don't control can login. control parts of subtree logged-in user can read or modify.


Comments

Post a Comment

Popular posts from this blog

jquery - How can I dynamically add a browser tab? -

since using iframes house external pages are, accounts "not preferred method" , disallowed sites (flickr, one), want dynamically generate browser tabs. e.g., when user submits form, want dynamically generate tab on browser in response submitted. e.g., might want add new tab url like: http://www.bigsurgarrapata.com/contact how in jquery? you want form target attribute action attribute. http://www.w3schools.com/tags/att_form_target.asp browsers have ultimate control on result of target attribute open new tab value of _blank. <form action="contact_submit.php" target="_blank" method="post">
Read more

keyboard - C++ GetAsyncKeyState alternative -

i using windows.h library's getasynckeystate function define key pushed on keyboard . here program returns int value of pushed key example. #include <iostream> #include <windows.h> using namespace std; int main (){ char i; for(i=8;i<190;i++){ if(getasynckeystate(i)== -32767){ cout<<int (i)<<endl; } } return 0; } but trying make opengl simple game , function appeared slow . there function not need cycle 180 times , if statement . thanks you're trying make opengl game, you're going use glfw. if that's case can away using glfwgetkey() such: if (glfwgetkey(glfw_key_up) == glfw_press) {...} if (glfwgetkey(glfw_key_down) == glfw_press) {...} that method nicely explained in tutorial 6 opengl-tutorial.org . should start first tutorial of beginners tutorials , later intermediate tutorials . if you're going make win32 window can listen wm_keydown or wm_keyup messages , virtua
Read more

android - java.net.UnknownHostException(Unable to resolve host “URL”: No address associated with hostname) -

i developing app testing asp.net webservice in android.for simple webservice adding 2 numbers used.where numbers passed parameters.the result in dialogue.the webserver works in local. when application runs following result exception.i provided internet permission in manifest. java.net.unknownhostexception(unable resolve host “ http://url.com/ ”: no address associated hostname) my code given below main activity public static string rslt=""; /** called when activity first created. */ @override public void oncreate(bundle savedinstancestate) { super.oncreate(savedinstancestate); setcontentview(r.layout.activity_main); button b1=(button)findviewbyid(r.id.button1); final alertdialog ad=new alertdialog.builder(this).create(); b1.setonclicklistener(new onclicklistener() { @override public void onclick(view arg0) { // todo auto-generated method stub try {
Read more