mirror of
https://git.openldap.org/openldap/openldap.git
synced 2024-12-21 03:10:25 +08:00
actually, we're not proxying SASL bind at all
This commit is contained in:
parent
a1308f8dfa
commit
458d1e3b50
@ -40,15 +40,11 @@ authz-regexp "^uid=([^,]+),.*" "uid=$1,ou=People,dc=example,dc=com"
|
||||
# cn=monitor, cn=schema, and cn=config
|
||||
#
|
||||
|
||||
# uid=proxy,ou=People,dc=example,dc=com needs to read userPassword
|
||||
# to do SASL bind!
|
||||
access to attr=userpassword
|
||||
by dn.exact="uid=proxy,ou=People,dc=example,dc=com" read
|
||||
by self =wx
|
||||
by anonymous =x
|
||||
|
||||
access to *
|
||||
by dn.exact="uid=proxy,ou=People,dc=example,dc=com" read
|
||||
by users read
|
||||
by * search
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user