diff --git a/config/ldap/init-ldap-acls.sh b/config/ldap/init-ldap-acls.sh index 67c6bfc..8141a20 100755 --- a/config/ldap/init-ldap-acls.sh +++ b/config/ldap/init-ldap-acls.sh @@ -1,26 +1,11 @@ #!/usr/bin/env bash set -eu -# load OpenLDAP environment and functions -. /opt/bitnami/scripts/libopenldap.sh - -trap ldap_stop EXIT - -# start LDAP in background -ldap_start_bg - -# wait until LDAP is started -while ! ldapsearch -Y EXTERNAL -H ldapi:/// -b "cn=admin,dc=opencloud,dc=eu" >/dev/null 2>&1; do - echo "Waiting for LDAP to start..." - sleep 1 -done - # apply acls echo -n "Applying acls... " -ldapmodify -Y EXTERNAL -H ldapi:/// -f /opt/bitnami/openldap/etc/schema/50_acls.ldif +slapmodify -F /opt/bitnami/openldap/etc/slapd.d -b cn=config -l /opt/bitnami/openldap/etc/schema/50_acls.ldif if [ $? -eq 0 ]; then echo "done." else echo "failed." fi - diff --git a/config/ldap/ldif/50_acls.ldif b/config/ldap/ldif/50_acls.ldif index 0384f10..5698f73 100644 --- a/config/ldap/ldif/50_acls.ldif +++ b/config/ldap/ldif/50_acls.ldif @@ -7,6 +7,3 @@ olcAccess: {0}to dn.subtree="dc=opencloud,dc=eu" attrs=entry,uid,objectClass,ent olcAccess: {1}to attrs=userPassword by self write by * auth -olcAccess: {2}to * - by dn.base="uid=admin,ou=users,dc=opencloud,dc=eu" write - by * none