--On Friday, April 29, 2022 10:42 PM +0000 gerson.garcia@itron.com wrote:
Quanah,
Yes I read it and tried replace "by * read" by "by * auth" and "by * none" but then nobody could access it. Like I said, I am new on this, any support other than google it, I would appreciate it.
olcAccess: {0}to attrs=userPassword by self write by anonymous auth by * none olcAccess: {1}to attrs=shadowLastChange by self write by * read olcAccess: {2}to dn.subtree="dc=nocinbox,dc=inc" by set="[cn=sec-admin,ou=groups,dc=nocinbox,dc=inc]/memberUid & user/uid" write by * read
The only thing that requires anonymous auth access is the userPassword attribute. However, other permissions may be necessary depending on the operations. It's important as well to understand the section on the pseudo attribute "entry too.
--Quanah