Novell LINUX ENTERPRISE SERVER 10 SP2 - INSTALLATION AND ADMINISTRATION Installation Manual page 692

Example 36.4 slapd.conf: Access Control
# Sample Access Control
#
# Allow self write access
#
#
# access to dn="" by * read
access to * by self write
#
# if no access controls are present, the default is:
#
#
# rootdn can always write!
Example 36.4, "slapd.conf: Access Control" (page 674) is the excerpt from slapd
.conf that regulates the access permissions for the LDAP directory on the server. The
settings made here in the global section of slapd.conf are valid as long as no custom
access rules are declared in the database-specific section. These would overwrite the
global declarations. As presented here, all users have read access to the directory, but
only the administrator (rootdn) can write to this directory. Access control regulation
in LDAP is a highly complex process. The following tips can help:
• Every access rule has the following structure:
access to <what> by <who> <access>
674 Installation and Administration
Allow read access of root DSE
Allow authenticated users read access
Allow anonymous users to authenticate
by users read
by anonymous auth
Allow read by all