Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 08-05-2008 Installation Manual page 688

Example 36.4 slapd.conf: Access Control
# Sample Access Control
#
# Allow self write access
#
#
# access to dn="" by * read
access to * by self write
#
# if no access controls are present, the default is:
#
#
# rootdn can always write!
Example 36.4, "slapd.conf: Access Control"
.conf that regulates the access permissions for the LDAP directory on the server. The
settings made here in the global section of slapd.conf are valid as long as no custom
access rules are declared in the database-specific section. These would overwrite the
global declarations. As presented here, all users have read access to the directory, but
only the administrator (rootdn) can write to this directory. Access control regulation
in LDAP is a highly complex process. The following tips can help:
• Every access rule has the following structure:
access to <what> by <who> <access>
670 Installation and Administration
Allow read access of root DSE
Allow authenticated users read access
Allow anonymous users to authenticate
by users read
by anonymous auth
Allow read by all
(page 670) is the excerpt from slapd