I can&#39;t find specifics on how it works, but the acls contain a &quot;set&quot; command so something like:<div><br></div><div>access to &lt;what&gt;</div><div>     by set=&quot;dn=[uid=myadmin,ou=people,dc=mydomain,dc=org] &amp; peername.ip=1.1.1.1&quot; read<br>
<br>might work for you, although I don&#39;t know the actual syntax or if this is how it was meant to be used.</div><div><br>The ACL reference is here: <a href="http://www.openldap.org/doc/admin24/access-control.html">http://www.openldap.org/doc/admin24/access-control.html</a></div>
<div><br></div><div>Kyle</div><div><br><div class="gmail_quote">2012/10/4 Mik J <span dir="ltr">&lt;<a href="mailto:mikydevel@yahoo.fr" target="_blank">mikydevel@yahoo.fr</a>&gt;</span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hello,<br>
<br>
I have this ACL that allows the users myadmin to list encrypted passwords<br>
<br>
<br>
access to attrs=userpassword,shadowMax,shadowExpire,sambaLMPassword,sambaNTPassword,sambaPwdLastSet<br>
        by dn=&quot;uid=myadmin,ou=people,dc=mydomain,dc=org&quot; read<br>
<br>
<br>
However this user my admin is supposed to come from one IP 1.1.1.1 only.<br>
I think that the peername directive might help to achive this task but I don&#39;t know how to associate it with the user myadmin.<br>
In conclusion I would like that the user myadmin coming from IP 1.1.1.1 be able to see the encrypted passwords.<br>
If the user myadmin comes from another IP like 2.2.2.2 he would not match the ACL and therefore not be able to see encrypted passwords.<br>
<br>
Does anyone know what is the syntax ?<br>
<br>
<br>
</blockquote></div><br></div>