1
vote
1answer
172 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
1
vote
1answer
95 views

OpenLDAP - ACL “set” notation not matching properly

I've got to set up an externally-anonymous accessible LDAP directory on an Ubuntu 12.04 Server, and I want to keep authentication and internal data in a different subtree. Example of the LDAP layout ...
3
votes
1answer
2k views

How to correctly ldapmodify replace olcAccess lines?

This is a part from olcDatabase={1}hdb.ldif olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=somesite,dc=com" write by * none olcAccess: ...
1
vote
1answer
547 views

How to add ACI's to OpenLDAP properly

So I'm trying to get some ACI's added to my OpenLDAP system (hosting on CentOS 6). I've read how others put their ACI's in bdb like so... olcAccess: to attrs=userPassword,shadowLastChange by ...
0
votes
1answer
424 views

Samba+LDAP acl - anonymous bind?

I have a working Samba PDC that uses OpenLDAP as backend. I am about to set up a samba proxy user and have problems writing the correct secure ACLs. I used this acl: {0}to * by ...
1
vote
1answer
910 views

LDAP (slapd) ACL issue - can add but not modify entries

I have an issue with the ACL configuration of an LDAP server (slapd). The following ACL entry is active as the first rule that applies: {0}to ...
2
votes
2answers
1k views

Linux file ACL and secondary groups

The Problem: CentOS does not seem to look at secondary groups when using ACL's on a folder or file Scenario: CentOS 6 basic install, uses LDAP accounts to authenticate users. I am trying to setup ...
0
votes
1answer
886 views

store users and groups permission (ACL) to LDAP

I'm trying to store ACL permissions to LDAP. I have permission for users and for groups (user belongs to many groups). Here is structure i create: ou=Groups cn=Admin [posixGroup] ...
2
votes
1answer
2k views

Impossible to modify or add information after conversion of slapd.conf to cn=config with fresh install of OpenLdap

I start with a fresh installation of openldap 2.4.28 on debian. They are some problem with the debian package, and with gnuTLS, so i compile a version with opennSSL library. It's hard to understand ...
0
votes
1answer
501 views

AuthzSVNAccessFile for git-http-backend?

I want to host some git-Repositories. Is it possible to setup them like SVN-Repos with a central ACL-File? (Have a look at AuthzSVNAccessFile-Directive for example) Thanks, Philipp
1
vote
1answer
265 views

Best way to control access?

I have a few servers that serve different purposes (and thus different users use each) that authenticate to an LDAP server (I do not have permission to modify content on the LDAP server). What is an ...
1
vote
1answer
2k views

OpenLDAP ACL to allow users to change their password

What ACL should be added slapd.conf to allow users to change their password. We are now having the default ACL allowing only rootdn the rights to modify while allowing reading by everyone including ...
1
vote
2answers
2k views

Configure ApacheDS 1.5 with accessControlEnabled=true for authenticated access

I need to set up an apacheDS instance. I am using standalone 1.5.5 on Linux. I have removed the example partition and added two of my own, each with their own suffixes. I have imported LDIFs for ...
8
votes
3answers
1k views

What good Active Directory + Exchange competition is there?

Based on this question regarding enhanced permission support in filesystems, what is the best permissions + directory and mail stack to compare against Active Directory on NTFS with Exchange? I'm ...
3
votes
2answers
266 views

What filesystem comes closest to matching NTFS for support of ACLs, and highly-granular permissioning?

It seems that most other filesystems handle the basic *nix permissions (ugo±rwx), with maybe an addition here or there. Or can be "made" to handle ACLs through the use of other tools on top of ...
1
vote
1answer
181 views

controlling access to multiple websites using apache and acls

My scenario is this. We have a machine that acts as an employee portal giving access to a few web based applications. What we would like to do is control user access to these applications using a ...