mirror of
https://github.com/opencloud-eu/opencloud-compose.git
synced 2026-06-08 20:20:04 +08:00
fix: change acls and how to apply them
This commit is contained in:
@@ -1,26 +1,11 @@
|
||||
#!/usr/bin/env bash
|
||||
set -eu
|
||||
|
||||
# load OpenLDAP environment and functions
|
||||
. /opt/bitnami/scripts/libopenldap.sh
|
||||
|
||||
trap ldap_stop EXIT
|
||||
|
||||
# start LDAP in background
|
||||
ldap_start_bg
|
||||
|
||||
# wait until LDAP is started
|
||||
while ! ldapsearch -Y EXTERNAL -H ldapi:/// -b "cn=admin,dc=opencloud,dc=eu" >/dev/null 2>&1; do
|
||||
echo "Waiting for LDAP to start..."
|
||||
sleep 1
|
||||
done
|
||||
|
||||
# apply acls
|
||||
echo -n "Applying acls... "
|
||||
ldapmodify -Y EXTERNAL -H ldapi:/// -f /opt/bitnami/openldap/etc/schema/50_acls.ldif
|
||||
slapmodify -F /opt/bitnami/openldap/etc/slapd.d -b cn=config -l /opt/bitnami/openldap/etc/schema/50_acls.ldif
|
||||
if [ $? -eq 0 ]; then
|
||||
echo "done."
|
||||
else
|
||||
echo "failed."
|
||||
fi
|
||||
|
||||
|
||||
@@ -7,6 +7,3 @@ olcAccess: {0}to dn.subtree="dc=opencloud,dc=eu" attrs=entry,uid,objectClass,ent
|
||||
olcAccess: {1}to attrs=userPassword
|
||||
by self write
|
||||
by * auth
|
||||
olcAccess: {2}to *
|
||||
by dn.base="uid=admin,ou=users,dc=opencloud,dc=eu" write
|
||||
by * none
|
||||
|
||||
Reference in New Issue
Block a user