Hi,<div><br></div><div>Ok </div><div><br></div><div>my rule is </div><div><div>access to dn.regex=&quot;^mail=([^,]+),ou=([^,]+),jvd=([^,]+),o=hosting,dc=myhosting,dc=example$&quot;</div><div>            attrs=userPassword</div>

<div>            by dn.exact=&quot;mail=$1,ou=$2,jvd=$3,o=hosting,dc=myhosting,dc=example&quot; write</div><div>            by dn.exact,expand=&quot;mail=$1,ou=$2,jvd=$3,o=hosting,dc=myhosting,dc=example&quot; read</div>
<div>
            by dn=&quot;cn=Manager,dc=myhosting,dc=example&quot; write</div><div>            by users none</div><div>            by * none</div><div><br></div>this doesn&#39;t work , users can&#39;t change their own password.</div>

<div><br></div><div>Also try this;</div><div><br></div><div><br></div><div><div>access to attrs=userpassword</div><div>  by self       write</div><div>  by anonymous  auth</div><div>  by dn=&quot;cn=Manager,dc=myhosting,dc=example&quot; write</div>

<div>  by users none</div><div>  by *          none</div></div><div><br></div><div> doesn&#39;t work again.</div><div><br></div><div>open ldap have another parameter for these things ???</div><div><br></div><div>??<br><div class="gmail_quote">

On Tue, Dec 20, 2011 at 8:56 PM, Quanah Gibson-Mount <span dir="ltr">&lt;<a href="mailto:quanah@zimbra.com">quanah@zimbra.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

<div class="im">--On Tuesday, December 20, 2011 4:28 PM +0200 Selcuk Yazar &lt;<a href="mailto:selcuk.yazar@gmail.com" target="_blank">selcuk.yazar@gmail.com</a>&gt; wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
access to<br>
dn.regex=&quot;(.*,ou=(.+),jvd=([^,<u></u>]+),o=hosting,dc=myhosting,dc=<u></u>example)&quot;<br>
        attrs=userPassword<br>
        by self write<br>
        by users write<br>
</blockquote>
<br></div>
&quot;by users write&quot; will allow any authenticated user to overwrite anyone&#39;s password.  I&#39;m guessing you really do *not* want this rule.<span class="HOEnZb"><font color="#888888"><br>
<br>
--Quanah<br>
<br>
<br>
--<br>
<br>
Quanah Gibson-Mount<br>
Sr. Member of Technical Staff<br>
Zimbra, Inc<br>
A Division of VMware, Inc.<br>
--------------------<br>
Zimbra ::  the leader in open source messaging and collaboration<br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br>Selçuk YAZAR<br><a href="http://www.selcukyazar.blogspot.com">http://www.selcukyazar.blogspot.com</a><br>
</div>