Skynet/nixos
6
1
Fork 0
Code Issues 43 Pull requests 1 Projects Releases Packages Wiki Activity Actions

ldap: set fields the user can change on their own

Browse source
This commit is contained in:
silver 2023-05-25 22:23:25 +01:00
parent d1b79da77c
commit eb34303c7b
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
applications/ldap.nix
View file

@ -143,7 +143,7 @@ Gonna use a priper nixos module for this
"olcDatabase={-1}frontend".attrs = { "olcDatabase={-1}frontend".attrs = {
objectClass = [ "olcDatabaseConfig" "olcFrontendConfig" ]; objectClass = [ "olcDatabaseConfig" "olcFrontendConfig" ];
olcPasswordHash = "{SSHA512}"; olcPasswordHash = "{SHA512}";
}; };
"olcDatabase={1}mdb" = { "olcDatabase={1}mdb" = {
@ -168,8 +168,12 @@ Gonna use a priper nixos module for this
by anonymous auth by anonymous auth
by * none'' by * none''
''{1}to attrs=mail,sshPublicKey,cn,sn,skDiscord
by self write
by * read''
/* allow read on anything else */ /* allow read on anything else */
''{1}to * ''{2}to *
by * read'' by * read''
]; ];