Gabriel,
Yes I tried but the result remains the same.
Thanks for your response,
Gabriel Stein wrote:
> Vincent,
>
> You tried to put this rules before the others access control rules?
>
> Keep in touch.
>
> Hugs,
>
>
> On 5/22/07, Vincent Batoufflet <vincent(a)buf.fr> wrote:
>>
>> Hi everyone,
>>
>> I try to setup some access rules for some openldap servers but I am
>> experiencing some difficulties with Access Control Entries.
>>
>> I want to allow anonymous access to a specific branch of my ldap tree
>> (autofs mount points):
>>
>> ou=mount,o=organization,dc=domain,dc=com
>>
>> This rule works perfectly if I comment all others rules, but when at
>> least one of them is commented out, it isn't working anymore.
>>
>> Do you have any idea ?
>>
>> Thanks.
>>
>>
>>
>> See above my ldap access rules:
>> # Default access rule
>> defaultaccess search
>>
>> # Access to passwords
>> access to attrs=userPassword
>> by dn="cn=replication,ou=role,dc=domain,dc=com" write
>> by dn="cn=system,ou=role,dc=domain,dc=com" read
>> by dn="cn=ftp-client,ou=role,dc=domain,dc=com" read
>> by self write
>> by * auth
>>
>> # FTP access
>> access to dn.subtree="ou=ftp,o=organization,dc=domain,dc=com"
>> by dn="cn=replication,ou=role,dc=domain,dc=com" write
>> by dn="cn=ftp-manager,ou=role,dc=domain,dc=com" read
>> by dn="cn=ftp-client,ou=role,dc=domain,dc=com" read
>>
>> # AutoFS access
>> acces to dn.subtree="ou=mount,o=organization,dc=domain,dc=com"
>> by dn="cn=replication,ou=role,dc=domain,dc=com" write
>> by anonymous read
>>
>> # Global accesses
>> access to *
>> by dn="cn=replication,ou=role,dc=domain,dc=com" write
>> by dn="cn=system,ou=role,dc=domain,dc=com" read
>> by dn="cn=extranet,ou=role,dc=domain,dc=com" read
>>
>> # Access to the base (prevent SASL problems)
>> access to dn.base=""
>> by * read
>>
>> --
>> Vincent Batoufflet
>>
>> Buf Compagnie
>> 3 rue Roquepine 75008 Paris, FRANCE
>> tel +33 1 42 68 18 28 - fax +33 1 42 68 18 29
>>
>
>
>
--
Vincent Batoufflet
Buf Compagnie
3 rue Roquepine 75008 Paris, FRANCE
tel +33 1 42 68 18 28 - fax +33 1 42 68 18 29