Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Readonly user rewrites access rights #456

Open
literakl opened this issue Jul 31, 2020 · 0 comments
Open

Readonly user rewrites access rights #456

literakl opened this issue Jul 31, 2020 · 0 comments

Comments

@literakl
Copy link

I am building a custom LDAP import and I was not able to allow new user to search within a branch. Only predefined user admin could search. I have relaxed the access rights but it did not help. Then I displayed the config and it hold the default value and not what I imported. The trouble is that when the read only user is allowed it is imported later then my imports and overwrites the config. Can you import the readonly user as soon as possible so custom imports can override it?

adding new entry "cn=manager,ou=ABC,dc=centaur,dc=TLD"
Processing file /container/service/slapd/assets/config/bootstrap/ldif/99-config.ldif
Processing file /container/service/slapd/assets/config/bootstrap/ldif/99-config.ldif
modifying entry "olcDatabase={1}mdb,cn=config"
Add read only user...
Processing file /container/service/slapd/assets/config/bootstrap/ldif/readonly-user/readonly-user.ldif
adding new entry "cn=readonly,dc=cgicentaur,dc=eu"
Processing file /container/service/slapd/assets/config/bootstrap/ldif/readonly-user/readonly-user-acl.ldif
modifying entry "olcDatabase={1}mdb,cn=config"
Add custom bootstrap ldif...

FYI is this ok?

Disable replication config...
ldap_modify: No such attribute (16)
        additional info: modify/delete: olcSyncrepl: no such attribute
ldap_delete: Server is unwilling to perform (53)
ldap_modify: No such attribute (16)
        additional info: modify/delete: olcSyncrepl: no such attribute
ldap_delete: Server is unwilling to perform (53)
ldap_modify: No such attribute (16)
        additional info: modify/delete: olcServerID: no such attribute
modifying entry "olcDatabase={1}mdb,cn=config"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant