diff --git a/applications/ldap.nix b/applications/ldap.nix index 5671859..a5a162c 100644 --- a/applications/ldap.nix +++ b/applications/ldap.nix @@ -181,16 +181,19 @@ Gonna use a priper nixos module for this olcAccess = [ /* custom access rules for userPassword attributes */ ''{0}to attrs=userPassword + by dn.exact="uid=ldap_api,ou=users,dc=skynet,dc=ie" manage by self write by anonymous auth by * none'' ''{1}to attrs=mail,sshPublicKey,cn,sn,skDiscord + by dn.exact="uid=ldap_api,ou=users,dc=skynet,dc=ie" manage by self write by * read'' /* allow read on anything else */ ''{2}to * + by dn.exact="uid=ldap_api,ou=users,dc=skynet,dc=ie" manage by * read'' ]; @@ -224,4 +227,4 @@ Gonna use a priper nixos module for this }; }; }; -} \ No newline at end of file +}