Re: Access to Schema

OpenLDAP test000-rootdse searches cn=Subschema as an anonymous user. Maybe you could start there as your example? I really doubt that anything "happens automatically"; that's not in the protocol. If you turn on stats/stats2 debug level, you'll likely see that your rootDN-configured client is executing some flavor of search. If you're suspecting acl, you can turn on acl debug level. On Tue, 17 Jul 2007, Ron Parker wrote: > I don't know what I mean. I've searched the Internet for "access to > schema" and can't seem to find an answer that works for what I'm > trying to do. > > What I want to do is, when a user logs in, to allow the ldap client > to read the schema for the server. This happens automatically when > the rootdn logs in, but apparently I have to explicity create access > control for a user's client to read the schema. > > From the examples I've been able to locate and understand, I've tried > the following: > > access to dn="cn=subschema" by * read > access to dn.base="cn=Subschema" by * read > access to dn.subtree="cn=Subschema" by * read > > but none appear to work. Apparently, I need another example of > exactly what I'm trying to do, which I don't seem able to locate. > > Thanks! > > -ron > > Aaron Richton wrote: > >> Is this what you mean, or do you mean cn=Subschema? (And note that >> that's not under "dc=example,dc=com." Search the list archive for >> examples.) >> >> On Tue, 17 Jul 2007, Ron Parker wrote: >> >>> Now that I can log in as a user: How do I give a user access to >>> schema? This is what I'm trying now (but not working): >>> >>> access to dn.subtree="cn=schema,dc=example,dc=com" >>> by dn="cn=Ron,ou=Zimbra,dc=example,dc=com" read >>> >>> What am I missing? Thanks! >>> >>> -ron >>> >>> -- >>> Ron Parker >>> Software Creations http://www.scbbs.com >>> Self-Administration Web Site http://saw.scbbs.com >>> SDSS Subscription Mgmt Service http://sdss.scbbs.com >>> Central Ave Dance Ensemble http://www.centralavedance.com >>> R & B Salsa http://www.randbsalsa.com >>> >>> >> >> __________ NOD32 2403 (20070717) Information __________ >> >> This message was checked by NOD32 antivirus system. >> http://www.eset.com >> >> >> > > > -- > Ron Parker > Software Creations http://www.scbbs.com > Self-Administration Web Site http://saw.scbbs.com > SDSS Subscription Mgmt Service http://sdss.scbbs.com > Central Ave Dance Ensemble http://www.centralavedance.com > R & B Salsa http://www.randbsalsa.com > > __________ NOD32 2403 (20070717) Information __________ This message was checked by NOD32 antivirus system. http://www.eset.com